From a6bfac51ef2130ddd2eb87bf8c4067e7dd523060 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 5 Mar 2024 22:53:18 +0000 Subject: [PATCH] fix: requirements-dev.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-5798483 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6057353 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091621 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091622 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091623 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6209406 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6209407 - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-3164749 - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-5805047 - https://snyk.io/vuln/SNYK-PYTHON-ETHABI-6085292 - https://snyk.io/vuln/SNYK-PYTHON-ETHKEYFILE-2391482 - https://snyk.io/vuln/SNYK-PYTHON-PYCRYPTODOME-6145007 - https://snyk.io/vuln/SNYK-PYTHON-PYCRYPTODOME-6219994 - https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-5750273 - https://snyk.io/vuln/SNYK-PYTHON-PYJWT-2840625 - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-5595532 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-5926907 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-6002459 - https://snyk.io/vuln/SNYK-PYTHON-VYPER-5458965 - https://snyk.io/vuln/SNYK-PYTHON-VYPER-5498580 - https://snyk.io/vuln/SNYK-PYTHON-VYPER-5529831 - https://snyk.io/vuln/SNYK-PYTHON-VYPER-5529832 - https://snyk.io/vuln/SNYK-PYTHON-VYPER-5529833 - https://snyk.io/vuln/SNYK-PYTHON-VYPER-5591073 - https://snyk.io/vuln/SNYK-PYTHON-VYPER-5805377 - https://snyk.io/vuln/SNYK-PYTHON-VYPER-5880667 - https://snyk.io/vuln/SNYK-PYTHON-VYPER-5905483 - https://snyk.io/vuln/SNYK-PYTHON-VYPER-5905487 - https://snyk.io/vuln/SNYK-PYTHON-VYPER-5920076 - https://snyk.io/vuln/SNYK-PYTHON-VYPER-6124761 - https://snyk.io/vuln/SNYK-PYTHON-WEBSOCKETS-1582792 - https://snyk.io/vuln/SNYK-PYTHON-WHEEL-3180413 --- requirements-dev.txt | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/requirements-dev.txt b/requirements-dev.txt index 536dfa4..7df9410 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -1,2 +1,15 @@ black==19.10b0 eth-brownie>=1.12.1,<2.0.0 +aiohttp>=3.9.2 # not directly required, pinned by Snyk to avoid a vulnerability +certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerability +eth-abi>=4.2.0 # not directly required, pinned by Snyk to avoid a vulnerability +eth-keyfile>=0.6.0 # not directly required, pinned by Snyk to avoid a vulnerability +pycryptodome>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability +pygments>=2.15.0 # not directly required, pinned by Snyk to avoid a vulnerability +pyjwt>=2.4.0 # not directly required, pinned by Snyk to avoid a vulnerability +requests>=2.31.0 # not directly required, pinned by Snyk to avoid a vulnerability +setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability +urllib3>=1.26.18 # not directly required, pinned by Snyk to avoid a vulnerability +vyper>=0.3.10rc4 # not directly required, pinned by Snyk to avoid a vulnerability +websockets>=10.0 # not directly required, pinned by Snyk to avoid a vulnerability +wheel>=0.38.0 # not directly required, pinned by Snyk to avoid a vulnerability