From 8d90fe61287153f2a2e8598ed91f14c43b972b59 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 26 Oct 2023 16:06:33 +0000 Subject: [PATCH] fix: backend_app/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6036192 --- backend_app/requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/backend_app/requirements.txt b/backend_app/requirements.txt index 1d128035..ed9fd9b5 100644 --- a/backend_app/requirements.txt +++ b/backend_app/requirements.txt @@ -74,3 +74,4 @@ botocore==1.19.25 django-cachalot==2.5.1 python-memcached==1.59 django-auth-adfs==1.9.5 +cryptography>=41.0.5 # not directly required, pinned by Snyk to avoid a vulnerability