From f6e25c66af249546086bf40b82f4fa86f4a0d91b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 30 Oct 2024 02:12:28 +0000 Subject: [PATCH] fix: optional-requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-STARLETTE-8186175 --- optional-requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/optional-requirements.txt b/optional-requirements.txt index 6686c6bbdd..938baef617 100644 --- a/optional-requirements.txt +++ b/optional-requirements.txt @@ -37,3 +37,4 @@ sparklines statsd uvicorn zeroconf==0.131.0 # Waiting correction for ARMv7: https://github.com/python-zeroconf/python-zeroconf/issues/1372 +starlette>=0.40.0 # not directly required, pinned by Snyk to avoid a vulnerability