From ebc37d75781bc691620064123891f1d4ca57da9d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 10 Jul 2024 03:27:59 +0000 Subject: [PATCH] fix: src/python/cli_new/pip-requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899 --- src/python/cli_new/pip-requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/src/python/cli_new/pip-requirements.txt b/src/python/cli_new/pip-requirements.txt index 4f512a42129..de4369769a2 100644 --- a/src/python/cli_new/pip-requirements.txt +++ b/src/python/cli_new/pip-requirements.txt @@ -16,3 +16,4 @@ wrapt==1.10.8 tox==3.2.1 -e ../lib +zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability