From b568a3174bdb18e316157b401dfdc6b2b047837f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 27 Nov 2024 08:18:11 +0000 Subject: [PATCH] fix: integration_tests/requirements/requirements-1.1.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-6150717 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-6809379 --- integration_tests/requirements/requirements-1.1.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/integration_tests/requirements/requirements-1.1.txt b/integration_tests/requirements/requirements-1.1.txt index a1f95aa..d815c7c 100644 --- a/integration_tests/requirements/requirements-1.1.txt +++ b/integration_tests/requirements/requirements-1.1.txt @@ -9,3 +9,4 @@ pytz # > for soft_unicode since it was deprecated and says we should be using soft_str # > instead (https://markupsafe.palletsprojects.com/en/2.1.x/changes/). MarkupSafe==2.0.1 +jinja2>=3.1.4 # not directly required, pinned by Snyk to avoid a vulnerability