From 557181838527e6bafcfd634edd7989f791e41d1c Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 12 Jan 2026 10:25:38 +0000 Subject: [PATCH] fix: requirements/local.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14896210 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-14908843 --- requirements/local.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/requirements/local.txt b/requirements/local.txt index 583c7c2e..f34189bd 100644 --- a/requirements/local.txt +++ b/requirements/local.txt @@ -1,6 +1,6 @@ -r base.txt -Werkzeug==2.2.3 # https://github.com/pallets/werkzeug +Werkzeug==3.1.5 # https://github.com/pallets/werkzeug ipdb==0.13.13 # https://github.com/gotcha/ipdb psycopg2==2.9.3 # https://github.com/psycopg/psycopg2 watchgod==0.7 # https://github.com/samuelcolvin/watchgod @@ -35,3 +35,4 @@ django-debug-toolbar # https://github.com/jazzband/django-debug-toolbar django-extensions==3.2.1 # https://github.com/django-extensions/django-extensions django-coverage-plugin==2.0.2 # https://github.com/nedbat/django_coverage_plugin pytest-django==4.5.2 # https://github.com/pytest-dev/pytest-django +urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability