From 89b23fa2c45ab7c0527d8f376a11f0a13e236a62 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 8 Feb 2023 16:51:05 +0000 Subject: [PATCH] fix: 3rdparty/python/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3172287 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3314966 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315324 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315328 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315331 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315452 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315972 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315975 --- 3rdparty/python/requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/3rdparty/python/requirements.txt b/3rdparty/python/requirements.txt index e50da50f4aa..e62f38cc05f 100644 --- a/3rdparty/python/requirements.txt +++ b/3rdparty/python/requirements.txt @@ -39,3 +39,4 @@ six>=1.9.0,<2 subprocess32==3.2.7 ; python_version<'3' wheel==0.31.1 www-authenticate==0.9.2 +cryptography>=39.0.1 # not directly required, pinned by Snyk to avoid a vulnerability