From c89bc83cd49931faccdf73e08b2fde15372ab976 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 7 May 2025 09:06:43 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-GEVENT-9919772 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-9964606 --- requirements.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/requirements.txt b/requirements.txt index afde4698..c0dd9cd8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -23,3 +23,5 @@ django-countries==3.3 -e git+https://github.com/scieloorg/thriftpy-wrap@0.1.1#egg=thriftpywrap elasticsearch>=1.0.0,<2.0.0 zerorpc>=0.4.4 +gevent>=25.4.1 # not directly required, pinned by Snyk to avoid a vulnerability +setuptools>=78.1.1 # not directly required, pinned by Snyk to avoid a vulnerability