From 348389e8556bdfd94db9d8d2c2ed49c09312c031 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 31 Aug 2024 18:34:34 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-5918878 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6043904 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6182918 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219984 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219986 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6514866 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index a725bb8..f555dd5 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9,4 +9,4 @@ sentence-transformers unstructured[pdf] pypdf nltk>=3.8.2 # not directly required, pinned by Snyk to avoid a vulnerability -pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file +pillow>=10.3.0 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file