fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6043904 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6041510
digiteinfotech · Nov 3, 2023 · 59d1fc6 · 59d1fc6
1 parent 4a3902d
commit 59d1fc6
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/requirements.txt b/requirements.txt
@@ -80,3 +80,5 @@ timeout-decorator
 anyio==3.7.1
 pytest-aioresponses
 aiohttp-retry
+pillow>=10.0.0 # not directly required, pinned by Snyk to avoid a vulnerability
+werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability