From ae18f3a1f37d00c09e5dc46db65986b43c2e0267 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 8 Dec 2025 09:25:42 +0000 Subject: [PATCH] fix: requirements/local.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-14157807 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-14157810 - https://snyk.io/vuln/SNYK-PYTHON-SQLPARSE-14157217 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192442 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192443 --- requirements/local.txt | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/requirements/local.txt b/requirements/local.txt index 57114698d..e6f6fe7f6 100644 --- a/requirements/local.txt +++ b/requirements/local.txt @@ -40,4 +40,7 @@ tornado>=6.3.3 # not directly required, pinned by Snyk to avoid a vulnerability django-test-migrations==1.3.0 -django-silk==5.3.2 \ No newline at end of file +django-silk==5.3.2 +django>=4.2.27 # not directly required, pinned by Snyk to avoid a vulnerability +sqlparse>=0.5.4 # not directly required, pinned by Snyk to avoid a vulnerability +urllib3>=2.6.0 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file