From 1314f5838d9995c145bf5389a4679b7f4c717e41 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Wed, 14 Jan 2026 01:45:36 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-AUTHLIB-14908840
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14896210
- https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-14908843
---
 requirements.txt | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 6e46466..bec5dcc 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,5 +1,5 @@
 async-timeout==4.0.3
-Authlib==1.6.4
+Authlib==1.6.6
 blinker==1.6.3
 certifi==2024.7.4
 cffi==1.17.1
@@ -19,7 +19,7 @@ pyhcl==0.4.5
 python-dotenv==1.0.0
 redis==5.0.1
 requests==2.32.4
-urllib3==2.5.0
-Werkzeug==3.0.6
+urllib3==2.6.3
+Werkzeug==3.1.5
 WTForms==3.0.1
 zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability