From ffc118394d0e6c52a7ccc00d5dc40f6cc671e112 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 12 Jan 2026 10:47:54 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871873 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871876 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871877 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871888 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871929 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871954 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871979 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14872000 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14896210 --- requirements.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index dfec8a8..a8136b8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,5 +1,5 @@ aiofiles==23.1.0 -aiohttp==3.8.5 +aiohttp==3.13.3 apscheduler==3.6.3 asyncio==3.4.3 beautifulsoup4==4.12.2 @@ -56,3 +56,4 @@ openai pyshorteners faker pyfiglet +urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability