From 3cc2b738d3d59c11255bb8a9c6d3f5f03e4acaaf Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 24 Nov 2024 10:32:46 +0000 Subject: [PATCH] fix: apps/chatbot-kickstarter/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-8400708 --- apps/chatbot-kickstarter/requirements.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/apps/chatbot-kickstarter/requirements.txt b/apps/chatbot-kickstarter/requirements.txt index 2866953be1..3697a85e36 100644 --- a/apps/chatbot-kickstarter/requirements.txt +++ b/apps/chatbot-kickstarter/requirements.txt @@ -9,4 +9,5 @@ termcolor==2.2.0 jupyter ipykernel textract -tiktoken \ No newline at end of file +tiktoken +tornado>=6.4.2 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file