fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091621
- https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091622
- https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6209406
- https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6209407
- https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6645291
- https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6808823
- https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867
- https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250
- https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899

requirements.txt

@@ -1,4 +1,4 @@
-aiohttp[speedups]>=3.9.2
+aiohttp>=3.9.4
 beautifulsoup4
 cvss
 defusedxml
@@ -16,11 +16,12 @@ packageurl-python
 packaging
 plotly
 pyyaml>=5.4
-requests>=2.32.0
+requests>=2.32.2
 rich
 rpmfile>=1.0.6
-setuptools>=65.5.1 # pinned by Snyk to avoid a vulnerability
+setuptools>=70.0.0 # pinned by Snyk to avoid a vulnerability
 toml; python_version < "3.11"
-urllib3>=1.26.5 # dependency of requests added explictly to avoid CVEs
+urllib3>=2.2.2 # dependency of requests added explictly to avoid CVEs
 xmlschema
 zstandard; python_version >= "3.4"
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability