From 64728ee9c27d9c9a323203c2b2714e6b6b96ec3f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 16 Nov 2023 14:20:29 +0000 Subject: [PATCH] fix: requirements_test.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-3164749 - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-5805047 - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-5595532 --- requirements_test.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/requirements_test.txt b/requirements_test.txt index a13ab17008658b..2e273884e6cf44 100644 --- a/requirements_test.txt +++ b/requirements_test.txt @@ -50,3 +50,5 @@ types-pytz==2023.3.1.1 types-PyYAML==6.0.12.12 types-requests==2.31.0.3 types-xmltodict==0.13.0.3 +certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerability +requests>=2.31.0 # not directly required, pinned by Snyk to avoid a vulnerability