From 58dba889d377c6212f74eda399d8fdd2cf95fca8 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 4 Apr 2026 08:34:37 +0000 Subject: [PATCH] fix: python/requirements-optional.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-15873704 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-15873731 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-15873732 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-15873733 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-15873734 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-15873735 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-15873736 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-15873737 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-15873738 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-15873739 --- python/requirements-optional.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/python/requirements-optional.txt b/python/requirements-optional.txt index 77de05af39..8f08ed54d4 100644 --- a/python/requirements-optional.txt +++ b/python/requirements-optional.txt @@ -3,3 +3,4 @@ web3 >= 4.8 Pillow stellar-sdk>=4.0.0,<6.0.0 rlp>=1.1.0 ; python_version<'3.7' +aiohttp>=3.13.4 # not directly required, pinned by Snyk to avoid a vulnerability