From 092d7dccb4fceb39a41a646ed3fd3f58383888a7 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 10 Jul 2025 17:17:57 +0000 Subject: [PATCH] fix: requirements/local.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-10390193 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-10390194 --- requirements/local.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/requirements/local.txt b/requirements/local.txt index 84e76bf33..f207584ba 100644 --- a/requirements/local.txt +++ b/requirements/local.txt @@ -38,4 +38,5 @@ django-coverage-plugin==3.1.0 # https://github.com/nedbat/django_coverage_plugi pytest-django==4.8.0 # https://github.com/pytest-dev/pytest-django tornado>=6.3.3 # not directly required, pinned by Snyk to avoid a vulnerability -django-test-migrations==1.3.0 \ No newline at end of file +django-test-migrations==1.3.0 +urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file