From 16e45a5e04a17a80a3b4de353d92ce72badf31ba Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 7 Dec 2024 18:03:01 +0000 Subject: [PATCH] fix: backend/requirements/local.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-8456315 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-8456316 --- backend/requirements/local.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/backend/requirements/local.txt b/backend/requirements/local.txt index c95ba9e1..efaca03f 100644 --- a/backend/requirements/local.txt +++ b/backend/requirements/local.txt @@ -29,3 +29,4 @@ django-debug-toolbar==2.2 # https://github.com/jazzband/django-debug-toolbar django-extensions==2.2.9 # https://github.com/django-extensions/django-extensions django-coverage-plugin==1.8.0 # https://github.com/nedbat/django_coverage_plugin pytest-django==3.9.0 # https://github.com/pytest-dev/pytest-django +django>=4.2.17 # not directly required, pinned by Snyk to avoid a vulnerability