From 872f9b71b8d610fa9a05e7be49ebe548ecb08539 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 26 Mar 2020 21:46:52 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-BLEACH-561119 - https://snyk.io/vuln/SNYK-PYTHON-PYYAML-559098 --- requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index bde0dfb..6355969 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,7 +1,7 @@ aspy.yaml==1.3.0 atomicwrites==1.3.0 attrs==19.1.0 -bleach==3.1.1 +bleach==3.1.2 certifi==2019.9.11 cfgv==2.0.1 chardet==3.0.4 @@ -22,7 +22,7 @@ Pygments==2.4.2 pyparsing==2.4.2 pytest==5.1.2 pytest-cov==2.7.1 -PyYAML==5.2 +PyYAML==5.3.1 readme-renderer==24.0 requests==2.22.0 requests-toolbelt==0.9.1