From 99777168c31ca399dfed23ebf72b344fdf5cbe31 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 6 May 2024 16:11:28 +0000
Subject: [PATCH] fix: pub_sub/python/http/order-processor/requirements.txt to
 reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6808933
---
 pub_sub/python/http/order-processor/requirements.txt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pub_sub/python/http/order-processor/requirements.txt b/pub_sub/python/http/order-processor/requirements.txt
index 289bc5eec..41a643f81 100644
--- a/pub_sub/python/http/order-processor/requirements.txt
+++ b/pub_sub/python/http/order-processor/requirements.txt
@@ -1,3 +1,4 @@
 Flask
 dapr
 cloudevents
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability