8000 fix: requirements.txt to reduce vulnerabilities (#822) · CoolNightTimeCoder/twilio-python@ab846b4 · GitHub
[go: up one dir, main page]
Skip to content

Commit ab846b4

Browse files
twilio-product-securitysnyk-botmanisha1997
authored
fix: requirements.txt to reduce vulnerabilities (twilio#822)
The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091621 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091622 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6209406 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6209407 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6645291 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6808823 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-7675597 - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250 - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899 Co-authored-by: snyk-bot <snyk-bot@snyk.io> Co-authored-by: Manisha Singh <singhmanisha.250025@gmail.com>
1 parent 8e1fdef commit ab846b4

File tree

1 file changed

+5
-3
lines changed

1 file changed

+5
-3
lines changed

‎requirements.txt

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,8 @@
11
pygments>=2.7.4 # not directly required, pinned by Snyk to avoid a vulnerability
2-
requests>=2.31.0
2+
requests>=2.32.2
33
PyJWT>=2.0.0, <3.0.0
4-
aiohttp>=3.9.4
5-
aiohttp-retry>=2.8.3
4+
aiohttp>=3.10.2
5+
aiohttp-retry==2.8.3
66
certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerability
7+
urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability
8+
zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability

0 commit comments

Comments
 (0)
0