fix: build/python/backend/requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-5918878
sublime-security · Dec 17, 2024 · ca64d72 · ca64d72
1 parent dbd91a3
commit ca64d72
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/build/python/backend/requirements.txt b/build/python/backend/requirements.txt
@@ -51,4 +51,5 @@ signify==0.3.0
 ssdeep==3.4
 tldextract==5.1.3
 tnefparse==1.4.0
-xmltodict==0.12.0
+xmltodict==0.12.0
+pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability