From ee29a10eafa7bbb6933418718a9fa994e413c7ec Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 15 Jul 2025 09:55:14 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-10390193 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-10390194 --- requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements.txt b/requirements.txt index b71d306f..0a49b6b6 100644 --- a/requirements.txt +++ b/requirements.txt @@ -26,3 +26,4 @@ kf_lib_data_ingest @ git+https://git@github.com/kids-first/kf-lib-data-ingest.gi graphene_django @ git+https://git@github.com/graphql-python/graphene-django.git@d52b18a700d2c1cec4b2de1f673bff14e2d18071 marshmallow==3.12.1 XlsxWriter==1.4.4 +urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability