From dbcb7acb9ce6cc1aa85fad316a97db3afbf5718d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 27 Sep 2023 00:33:11 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-5918878 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 98c9c0dd..263396bf 100644 --- a/requirements.txt +++ b/requirements.txt @@ -50,7 +50,7 @@ unicodecsv ; python_version < '3' and python_version >= '2.7' python-stdnum # GUI -Pillow<3.5.0 ; python_version < '2.7' +Pillow<10.0.1 ; python_version < '2.7' Pillow ; python_version >= '2.7' # core pagegenerators