From 17e165c5a799a0fe205cd414cc875572a2509343 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 1 Feb 2024 15:22:55 +0000 Subject: [PATCH] fix: backend/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219984 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219986 --- backend/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/requirements.txt b/backend/requirements.txt index 6f2115e..06ed542 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -8,7 +8,7 @@ django-logentry-admin==1.0.4 djangorestframework==3.11.2 mysqlclient==1.3.12 pathlib==1.0.1 -Pillow==9.0.1 +Pillow==10.2.0 python-decouple==3.1 pytz==2017.3 six==1.11.0