From d78941a027f79477671261a17b34bfe729eb5004 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 11 Jun 2022 09:42:38 +0000 Subject: [PATCH] fix: pip-sample/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-1012994 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-174126 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1086606 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1088505 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-458931 --- pip-sample/requirements.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pip-sample/requirements.txt b/pip-sample/requirements.txt index 680d08166..17526c79d 100644 --- a/pip-sample/requirements.txt +++ b/pip-sample/requirements.txt @@ -17,7 +17,7 @@ ipython-genutils==0.2.0 ipywidgets==7.4.2 itsdangerous==1.1.0 jedi==0.12.1 -Jinja2==2.10 +Jinja2==2.11.3 jsonschema==2.6.0 jupyter==1.0.0 jupyter-client==5.2.3 @@ -41,7 +41,7 @@ prometheus-client==0.3.1 protobuf==3.6.1 protobuf-to-dict==0.1.0 ptyprocess==0.6.0 -Pygments==2.2.0 +Pygments==2.7.4 pyparsing==2.2.0 PySocks==1.6.8 python-dateutil==2.7.3 @@ -62,6 +62,6 @@ urllib3==1.23 virtualenv==16.0.0 wcwidth==0.1.7 webencodings==0.5.1 -Werkzeug==0.14.1 +Werkzeug==0.15.3 widgetsnbextension==3.4.2 xlrd==1.1.0