From 7ecdbed5f3a591fd67181a13946d68929da01df2 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 31 Oct 2022 20:29:12 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-1012994 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-174126 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-455616 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1086606 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1088505 - https://snyk.io/vuln/SNYK-PYTHON-SPHINX-570772 - https://snyk.io/vuln/SNYK-PYTHON-SPHINX-570773 --- requirements.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements.txt b/requirements.txt index 88fbe09..714035a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,11 +1,11 @@ CouchDB==1.0 -Jinja2==2.7.3 +Jinja2==2.11.3 LEPL==5.1.3 MarkupSafe==0.23 PasteDeploy==1.5.2 PyYAML==3.11 -Pygments==2.0.2 -Sphinx==1.3.1 +Pygments==2.7.4 +Sphinx==3.0.4 WebOb==1.4.1 WebTest==2.0.18 beautifulsoup4==4.3.2