fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6035177 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6808933
aivclab · May 24, 2024 · d32026c · d32026c
1 parent d18e697
commit d32026c
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/requirements.txt b/requirements.txt
@@ -11,4 +11,6 @@ schedule
 sorcery
 setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability
 dash
-plotly
+plotly
+requests>=2.32.0 # not directly required, pinned by Snyk to avoid a vulnerability
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability