From 8cfe6d9bce8452e88bdeb9525b116e4b1187175a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 6 Sep 2024 02:59:30 +0000 Subject: [PATCH] fix: circleci-example/circleci-python-artifactory/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7886958 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7886959 --- circleci-example/circleci-python-artifactory/requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/circleci-example/circleci-python-artifactory/requirements.txt b/circleci-example/circleci-python-artifactory/requirements.txt index 2ff69ee04..605924997 100644 --- a/circleci-example/circleci-python-artifactory/requirements.txt +++ b/circleci-example/circleci-python-artifactory/requirements.txt @@ -1,3 +1,4 @@ PyYAML==5.1 django-rss-plugin==0.0.9 nltk==3.4.5 +django>=4.2.16 # not directly required, pinned by Snyk to avoid a vulnerability