From 0d908a43e1aa32057a67d9e3839dafcd71b934e1 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 5 Jul 2024 01:49:34 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6050294 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6126975 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6149518 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6157248 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6210214 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6261585 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6592767 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6913422 - https://snyk.io/vuln/SNYK-PYTHON-IDNA-6597975 - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867 - https://snyk.io/vuln/SNYK-PYTHON-SELENIUM-6062316 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250 --- requirements.txt | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/requirements.txt b/requirements.txt index 6739780..86bd5dc 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,7 +11,7 @@ certifi==2023.11.17 cffi==1.16.0 charset-normalizer==3.3.2 cloud-sql-python-connector==1.5.0 -cryptography==41.0.7 +cryptography==42.0.8 exceptiongroup==1.2.0 frozenlist==1.4.1 google-api==0.1.12 @@ -31,7 +31,7 @@ h2==4.1.0 hpack==4.0.0 httplib2==0.22.0 hyperframe==6.0.1 -idna==3.6 +idna==3.7 iniconfig==2.0.0 kaitaistruct==0.10 multidict==6.0.4 @@ -48,7 +48,7 @@ pyparsing==3.1.1 PySocks==1.7.1 pytest==7.4.4 python-dateutil==2.8.2 -requests==2.31.0 +requests==2.32.2 rsa==4.9 scramp==1.4.4 selenium==4.16.0 @@ -62,7 +62,7 @@ trio==0.23.2 trio-websocket==0.11.1 typing_extensions==4.9.0 uritemplate==4.1.1 -urllib3==2.1.0 +urllib3==2.2.2 wsproto==1.2.0 yarl==1.9.4 zstandard==0.22.0