From eb932e4cf1f9c6c8765f6e19d3b1deb38718a644 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 8 Jul 2026 20:53:09 +0000 Subject: [PATCH 1/2] fix: requirements/base.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-17824465 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-17824466 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-17824468 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-17824469 - https://snyk.io/vuln/SNYK-PYTHON-WAGTAIL-17810134 --- requirements/base.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements/base.txt b/requirements/base.txt index c654bf45..310dda39 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -1,6 +1,6 @@ pytz==2025.2 # https://github.com/stub42/pytz python-slugify==8.0.4 # https://github.com/un33k/python-slugify -Pillow==12.1.0 # https://github.com/python-pillow/Pillow +Pillow==12.3.0 # https://github.com/python-pillow/Pillow rcssmin==1.2.2 # https://github.com/ndparker/rcssmin argon2-cffi==25.1.0 # https://github.com/hynek/argon2_cffi whitenoise==6.11.0 # https://github.com/evansd/whitenoise From ab80c185eda884b74aeddbf1ddf4c821be6d5132 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 8 Jul 2026 20:53:28 +0000 Subject: [PATCH 2/2] fix: requirements/base.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-17824465 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-17824466 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-17824468 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-17824469 - https://snyk.io/vuln/SNYK-PYTHON-WAGTAIL-17810134