From 3fb2c0e0392f02acaf1473630915ace85b9acb3c Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 9 Feb 2023 07:24:03 +0000 Subject: [PATCH] fix: requirements_all_ds.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3172287 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3314966 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315324 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315328 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315331 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315452 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315972 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315975 --- requirements_all_ds.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements_all_ds.txt b/requirements_all_ds.txt index 15cda6fecc..83a579b0c2 100644 --- a/requirements_all_ds.txt +++ b/requirements_all_ds.txt @@ -42,3 +42,4 @@ xlrd==2.0.1 openpyxl==3.0.7 firebolt-sdk pandas==1.3.4 +cryptography>=39.0.1 # not directly required, pinned by Snyk to avoid a vulnerability