From 2752dd164adbd7125aef3717beafa2b0ff5a16f5 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 13 Dec 2025 11:42:38 +0000 Subject: [PATCH] fix: requirements/requirements_writers.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-FONTTOOLS-14151621 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-14400977 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-14400978 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-14400979 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192442 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192443 --- requirements/requirements_writers.txt | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/requirements/requirements_writers.txt b/requirements/requirements_writers.txt index 2c9cd3af..4fdef9b3 100644 --- a/requirements/requirements_writers.txt +++ b/requirements/requirements_writers.txt @@ -4,5 +4,7 @@ pandas pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability scikit-learn sorcery -tornado>=6.3.3 # not directly required, pinned by Snyk to avoid a vulnerability +tornado>=6.5.3 # not directly required, pinned by Snyk to avoid a vulnerability visdom +fonttools>=4.61.0 # not directly required, pinned by Snyk to avoid a vulnerability +urllib3>=2.6.0 # not directly required, pinned by Snyk to avoid a vulnerability