From fbeb16dabcbb88b6b4511aba7e6166c2b3e8164d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 15 Jan 2026 06:34:13 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-FILELOCK-14912448 - https://snyk.io/vuln/SNYK-PYTHON-PYPDF-14912439 - https://snyk.io/vuln/SNYK-PYTHON-PYPDF-14912440 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14896210 --- requirements.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements.txt b/requirements.txt index 9ebdd1a494..b8951dc4fd 100644 --- a/requirements.txt +++ b/requirements.txt @@ -37,7 +37,7 @@ fastapi-jwt-auth==0.5.0 FastAPI-SQLAlchemy==0.2.1 feedfinder2==0.0.4 feedparser==6.0.10 -filelock==3.12.0 +filelock==3.20.3 frozenlist==1.3.3 google-search-results==2.4.2 google-serp-api==1.0.3 @@ -129,7 +129,7 @@ tqdm==4.65.0 tweepy==4.14.0 typing-inspect==0.8.0 ujson==5.7.0 -urllib3==1.26.16 +urllib3==2.6.3 uvicorn==0.22.0 vine==5.0.0 w3lib==2.1.1 @@ -148,7 +148,7 @@ pre-commit==3.3.3 pytest-cov==4.1.0 pytest-mock==3.11.1 transformers==4.30.2 -pypdf==3.11.0 +pypdf==6.6.0 python-pptx==0.6.21 Pillow==9.5.0 EbookLib==0.18