From eeb9a5e62a2d09b3dfe568524192ecddc067cf9a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 11 Sep 2023 17:46:46 +0000 Subject: [PATCH] fix: pip-sample/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-BLEACH-561754 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-1012994 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-174126 - https://snyk.io/vuln/SNYK-PYTHON-NLTK-1053952 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321970 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1086606 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1088505 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-1533435 --- pip-sample/requirements.txt | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/pip-sample/requirements.txt b/pip-sample/requirements.txt index cc88e645..9f519b35 100644 --- a/pip-sample/requirements.txt +++ b/pip-sample/requirements.txt @@ -1,4 +1,4 @@ -bleach==2.1.4 +bleach==3.1.4 certifi==2018.8.24 chardet==3.0.4 Click==7.0 @@ -17,7 +17,7 @@ ipython-genutils==0.2.0 ipywidgets==7.4.2 itsdangerous==1.1.0 jedi==0.12.1 -Jinja2==2.10 +Jinja2==2.11.3 jsonschema==2.6.0 jupyter==1.0.0 jupyter-client==5.2.3 @@ -28,9 +28,9 @@ matplotlib==2.2.2 mistune==0.8.3 nbconvert==5.4.0 nbformat==4.4.0 -nltk==3.3 +nltk==3.6 notebook==5.7.0 -numpy==1.16.3 +numpy==1.22.0rc1 oauthlib==2.1.0 pandas==0.23.3 pandocfilters==1.4.2 @@ -41,7 +41,7 @@ prometheus-client==0.3.1 protobuf==3.6.1 protobuf-to-dict==0.1.0 ptyprocess==0.6.0 -Pygments==2.2.0 +Pygments==2.7.4 pyparsing==2.2.0 PySocks==1.6.8 python-dateutil==2.7.3 @@ -58,7 +58,7 @@ testpath==0.4.1 tornado==5.1.1 traitlets==4.3.2 tweepy==3.6.0 -urllib3==1.23 +urllib3==1.26.5 virtualenv==16.0.0 wcwidth==0.1.7 webencodings==0.5.1