From b73b9e175ec46b6191905fa479591cc42b22a27c Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 30 Dec 2024 06:30:57 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-8548181 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-8548987 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 295401414..de9f79476 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,7 +5,7 @@ # GAE packages should match the "libraries" section of app.yaml django==1.2 -jinja2==2.6 +jinja2==3.1.5 markupsafe==0.15 webapp2==2.3 webob==1.1.1