From 00b0e9121a8c45fb38a17940709e27c0ff3d6648 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 9 Nov 2022 07:48:23 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-1012994 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-174126 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-455616 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1086606 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1088505 - https://snyk.io/vuln/SNYK-PYTHON-SPHINX-570772 - https://snyk.io/vuln/SNYK-PYTHON-SPHINX-570773 --- requirements.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements.txt b/requirements.txt index e57cd84308..45ca91776d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,11 +1,11 @@ CouchDB==1.0 -Jinja2==2.7.3 +Jinja2==2.11.3 LEPL==5.1.3 MarkupSafe==0.23 PasteDeploy==1.5.2 PyYAML==3.11 -Pygments==2.0.2 -Sphinx==1.3.1 +Pygments==2.7.4 +Sphinx==3.0.4 WebOb==1.4.1 WebTest==2.0.18 beautifulsoup4==4.3.2