From 716bfef0328b6a250cbcc68d2e01067187cc43f4 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 13 Jan 2026 05:04:20 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871873 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871876 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871877 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871888 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871929 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871954 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871979 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14872000 - https://snyk.io/vuln/SNYK-PYTHON-FILELOCK-14912448 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14896210 --- requirements.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements.txt b/requirements.txt index 9ebdd1a494..9b9f8d49b7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,4 +1,4 @@ -aiohttp==3.8.4 +aiohttp==3.13.3 aiosignal==1.3.1 alembic==1.11.1 amqp==5.1.1 @@ -37,7 +37,7 @@ fastapi-jwt-auth==0.5.0 FastAPI-SQLAlchemy==0.2.1 feedfinder2==0.0.4 feedparser==6.0.10 -filelock==3.12.0 +filelock==3.20.3 frozenlist==1.3.3 google-search-results==2.4.2 google-serp-api==1.0.3 @@ -129,7 +129,7 @@ tqdm==4.65.0 tweepy==4.14.0 typing-inspect==0.8.0 ujson==5.7.0 -urllib3==1.26.16 +urllib3==2.6.3 uvicorn==0.22.0 vine==5.0.0 w3lib==2.1.1