From 4dddc4796f22c9d98e394e427b5992ddfd4b5309 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 20 Feb 2023 06:25:27 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-2428349 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-40552 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-40566 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-538573 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-538575 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-539932 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-543054 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-564339 - https://snyk.io/vuln/SNYK-PYTHON-WEBOB-40490 --- requirements.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements.txt b/requirements.txt index e57cd84308..33ffa03e8d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,7 +6,7 @@ PasteDeploy==1.5.2 PyYAML==3.11 Pygments==2.0.2 Sphinx==1.3.1 -WebOb==1.4.1 +WebOb==1.6.0a0 WebTest==2.0.18 beautifulsoup4==4.3.2 boto==2.31.1 @@ -32,7 +32,7 @@ pytz==2014.10 repoze.lru==0.6 requests==2.7.0 schematics==1.1.0 -setuptools==7.0 +setuptools==65.5.1 sh==1.11 simplejson==3.6.5 six==1.9.0 @@ -40,7 +40,7 @@ sphinxcontrib-httpdomain==1.4.0 translationstring==1.3 tzlocal==1.1.2 venusian==1.0 -waitress==0.8.9 +waitress==2.1.1 zope.deprecation==4.1.1 zope.interface==4.1.1 git+https://github.com/openprocurement/barbecue.git