fix: backend_app/requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6149518 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6157248 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6210214
Patrowl · Feb 1, 2024 · 4bb9fe2 · 4bb9fe2
1 parent 4adcca1
commit 4bb9fe2
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/backend_app/requirements.txt b/backend_app/requirements.txt
@@ -74,3 +74,4 @@ botocore==1.19.25
 django-cachalot==2.5.1
 python-memcached==1.59
 django-auth-adfs==1.9.5
+cryptography>=42.0.2 # not directly required, pinned by Snyk to avoid a vulnerability