From 2e88bf1134d1dac9d710b3c759bd304c126bb37e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 14 Nov 2022 05:33:24 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-FLASK-42185 - https://snyk.io/vuln/SNYK-PYTHON-FLASK-451637 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-1012994 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-174126 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-455616 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-40482 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-42069 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-458931 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-564338 --- requirements.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements.txt b/requirements.txt index ce56d38..8dad5e7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,10 +1,10 @@ -Flask==0.11.1 +Flask==0.12.3 Flask-Login==0.3.2 -Jinja2==2.8 +Jinja2==2.11.3 MarkupSafe==0.23 PyYAML==3.11 SQLAlchemy==1.0.13 -Werkzeug==0.11.10 +Werkzeug==0.15.3 click==6.6 itsdangerous==0.24 paramiko==2.0.1