From 0afc42aa878c4c3c362ae9e279a437bf712a10dd Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 3 Nov 2024 06:01:51 +0000 Subject: [PATCH] fix: src/loadgenerator/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-GEVENT-8320934 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-8309091 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-8309092 --- src/loadgenerator/requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/loadgenerator/requirements.txt b/src/loadgenerator/requirements.txt index 532c613940a..bf88a77eb73 100644 --- a/src/loadgenerator/requirements.txt +++ b/src/loadgenerator/requirements.txt @@ -10,7 +10,7 @@ click==7.1.2 # via flask configargparse==1.2.3 # via locust flask-basicauth==0.2.0 # via locust flask==1.1.2 # via flask-basicauth, locust -gevent==20.12.1 # via geventhttpclient, locust +gevent==24.10.1 # via geventhttpclient, locust geventhttpclient==1.4.4 # via locust greenlet==0.4.17 # via gevent idna==2.10 # via requests @@ -24,7 +24,7 @@ pyzmq==19.0.2 # via locust requests==2.24.0 # via locust six==1.15.0 # via geventhttpclient urllib3==1.25.10 # via requests -werkzeug==1.0.1 # via flask, locust +werkzeug==3.0.6 # via flask, locust zope.event==4.5.0 # via gevent zope.interface==5.1.0 # via gevent