From 6a107d300a274bd48e62483be701eb1ddda5c38f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 15 Aug 2024 01:16:37 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250 --- requirements.txt | 2 ++ 1 file changed, 2 insertions(+) mode change 100755 => 100644 requirements.txt diff --git a/requirements.txt b/requirements.txt old mode 100755 new mode 100644 index a9f323d..1f01e18 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1,3 @@ google-cloud-secret-manager==2.12.3 +requests>=2.32.2 # not directly required, pinned by Snyk to avoid a vulnerability +urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability