From b54bb6c6208b814361cb48a0fcb4380832708f80 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 4 Mar 2021 02:29:06 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-1081494 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-1081501 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-1081502 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 106632c..053b7d6 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,6 +1,6 @@ django==2.1.2 django-compressor==2.2 -Pillow==5.3.0 +Pillow==8.1.1 whitenoise==4.1 sorl-thumbnail==12.5.0 psycopg2==2.7.5