From aaa1d88d1934e09ad21bbdaacb8b83a3f985a4c0 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 9 Jan 2021 05:39:21 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-174126 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-40028 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-455616 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-1041750 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-40482 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-42069 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-458931 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-564338 --- requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index aa79cb0..a287799 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,5 +1,5 @@ Flask==0.9 -Jinja2==2.6 -Werkzeug==0.8.3 +Jinja2==2.10.1 +Werkzeug==0.11.6 argparse==1.2.1 wsgiref==0.1.2