From a5aaedb1b4d840ed98316a887555461f84e99479 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 11 Mar 2025 02:30:23 +0000 Subject: [PATCH] fix: repos/lopq/python/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321964 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321966 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321969 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321970 - https://snyk.io/vuln/SNYK-PYTHON-SCIKITLEARN-1079100 - https://snyk.io/vuln/SNYK-PYTHON-SCIKITLEARN-3186293 - https://snyk.io/vuln/SNYK-PYTHON-SCIPY-5756497 - https://snyk.io/vuln/SNYK-PYTHON-SCIPY-5759266 --- repos/lopq/python/requirements.txt | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/repos/lopq/python/requirements.txt b/repos/lopq/python/requirements.txt index 4c7bd1806..42441818b 100644 --- a/repos/lopq/python/requirements.txt +++ b/repos/lopq/python/requirements.txt @@ -1,4 +1,6 @@ nose>=1.3.4 protobuf>=2.6 -scikit-learn>=0.15 -lmdb>=0.87 \ No newline at end of file +scikit-learn>=0.24.2 +lmdb>=0.87 +numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability +scipy>=1.10.0rc1 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file