From 6ff97c26a0e99b063f7925552f78d244bfd01149 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 6 Oct 2022 18:54:42 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-1066259 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-1076802 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-1090612 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-1279042 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-1290072 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-1298665 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-1298666 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2312875 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2329158 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2329159 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2329160 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2389002 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2389021 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2606966 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2606969 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2940618 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2968205 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-456540 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-456541 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-456542 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-456566 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-536439 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-538244 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-543998 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-559326 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-571013 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-571014 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-609368 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-609369 - https://snyk.io/vuln/SNYK-PYTHON-ETHACCOUNT-2988803 - https://snyk.io/vuln/SNYK-PYTHON-ETHKEYFILE-2391482 - https://snyk.io/vuln/SNYK-PYTHON-WEBSOCKETS-1582792 --- requirements.txt | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 4f8d65f..608192b 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,2 +1,5 @@ -django==2.2.3 +django==3.2.15 web3==4.8.2 +websockets>=10.0 # not directly required, pinned by Snyk to avoid a vulnerability +eth-keyfile>=0.6.0 # not directly required, pinned by Snyk to avoid a vulnerability +eth-account>=0.5.9 # not directly required, pinned by Snyk to avoid a vulnerability