From 49d53de8d865f2b881e49f8f1e6df35cf1b3a7c7 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 12 Jan 2026 23:55:50 +0000 Subject: [PATCH] fix: rai_test_utils/requirements-dev.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14896210 --- rai_test_utils/requirements-dev.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/rai_test_utils/requirements-dev.txt b/rai_test_utils/requirements-dev.txt index 7abf875ff0..e6e3f7e826 100644 --- a/rai_test_utils/requirements-dev.txt +++ b/rai_test_utils/requirements-dev.txt @@ -9,4 +9,5 @@ numpy<2.0.0 ml-wrappers requests Pillow>=10.0.0; python_version>"3.7" # due to breaking changes in v10.0.0 (https://pillow.readthedocs.io/en/latest/releasenotes/10.0.0.html) -Pillow<10.0.0; python_version<="3.7" # Pillow v10.0.0 is only available starting with Python 3.8 \ No newline at end of file +Pillow<10.0.0; python_version<="3.7" # Pillow v10.0.0 is only available starting with Python 3.8 +urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file