From f27c03b4b2cf5e12fda76007c79c947b82877ebc Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 26 Oct 2023 16:38:52 +0000 Subject: [PATCH] fix: requirements-dev.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6035177 --- requirements-dev.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index 1597c90..1f777cf 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -32,4 +32,5 @@ xmltodict >= 0.12 # test requirements for extra packages zarr >= 2.13.3 -tornado>=6.3.3 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file +tornado>=6.3.3 # not directly required, pinned by Snyk to avoid a vulnerability +werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file