From 2d4e25f8373c7d215f6d394b6817706413be78fb Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 11 Dec 2025 00:49:03 +0000 Subject: [PATCH] fix: rai_test_utils/requirements-object-detection.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192442 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192443 --- rai_test_utils/requirements-object-detection.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/rai_test_utils/requirements-object-detection.txt b/rai_test_utils/requirements-object-detection.txt index 1e1cc4513d..ec72e4e78f 100644 --- a/rai_test_utils/requirements-object-detection.txt +++ b/rai_test_utils/requirements-object-detection.txt @@ -1,3 +1,4 @@ requests Pillow>=10.0.0; python_version>"3.7" # due to breaking changes in v10.0.0 (https://pillow.readthedocs.io/en/latest/releasenotes/10.0.0.html) -Pillow<10.0.0; python_version<="3.7" # Pillow v10.0.0 is only available starting with Python 3.8 \ No newline at end of file +Pillow<10.0.0; python_version<="3.7" # Pillow v10.0.0 is only available starting with Python 3.8 +urllib3>=2.6.0 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file