fix: service_invocation/python/http/order-processor/requirements.txt …

…to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6808823
dapr · May 5, 2024 · 096fd23 · 096fd23
1 parent 6c1392a
commit 096fd23
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/service_invocation/python/http/order-processor/requirements.txt b/service_invocation/python/http/order-processor/requirements.txt
@@ -1,3 +1,4 @@
 Flask
 dapr
-typing-extensions
+typing-extensions
+aiohttp>=3.9.4 # not directly required, pinned by Snyk to avoid a vulnerability