fix: service_invocation/python/http/order-processor/requirements.txt …

…to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6808933
dapr · May 6, 2024 · 95ab112 · 95ab112
1 parent 6c1392a
commit 95ab112
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/service_invocation/python/http/order-processor/requirements.txt b/service_invocation/python/http/order-processor/requirements.txt
@@ -1,3 +1,4 @@
 Flask
 dapr
-typing-extensions
+typing-extensions
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability