From 6c711677c5d50f20d06a35a41ae8abb1934da4b1 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 5 Jan 2022 05:55:15 +0000 Subject: [PATCH] fix: tutorials/ardu-pi-serial-part-1/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-2329135 --- tutorials/ardu-pi-serial-part-1/requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/tutorials/ardu-pi-serial-part-1/requirements.txt b/tutorials/ardu-pi-serial-part-1/requirements.txt index 4b62cf1a21..fe730447dd 100644 --- a/tutorials/ardu-pi-serial-part-1/requirements.txt +++ b/tutorials/ardu-pi-serial-part-1/requirements.txt @@ -6,3 +6,4 @@ paho-mqtt==1.3.1 sense-hat==2.2.0 RTIMULib==7.2.1b1 pyserial==3.4 +pillow>=9.0.0 # not directly required, pinned by Snyk to avoid a vulnerability