From 5f4a29e1a42f212942d245101563be38b7dcf72b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 2 Nov 2022 23:06:39 +0000 Subject: [PATCH] fix: test-requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-1012994 - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-174126 - https://snyk.io/vuln/SNYK-PYTHON-PYYAML-42159 - https://snyk.io/vuln/SNYK-PYTHON-PYYAML-559098 - https://snyk.io/vuln/SNYK-PYTHON-PYYAML-590151 - https://snyk.io/vuln/SNYK-PYTHON-WHEEL-3092128 --- test-requirements.txt | 3 +++ 1 file changed, 3 insertions(+) diff --git a/test-requirements.txt b/test-requirements.txt index a43df81f..7806b847 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8,3 +8,6 @@ pylint pytest # for integration and platform tests cloudify>=3.4.1 +jinja2>=2.11.3 # not directly required, pinned by Snyk to avoid a vulnerability +pyyaml>=5.4 # not directly required, pinned by Snyk to avoid a vulnerability +wheel>=0.38.0 # not directly required, pinned by Snyk to avoid a vulnerability