From 4d3594383f6cca69bfd5319e17f50057964b4c68 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 21 Jan 2024 15:06:40 +0000 Subject: [PATCH 1/2] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6182918 --- requirements.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) mode change 100755 => 100644 requirements.txt diff --git a/requirements.txt b/requirements.txt old mode 100755 new mode 100644 index d682f15..3f5e308 --- a/requirements.txt +++ b/requirements.txt @@ -3,4 +3,5 @@ pandas ase mpds_client shapely[vectorized] -scipy \ No newline at end of file +scipy +pillow>=10.2.0 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file From d11bc8ce8b88360b17f16ef5f0cda78a5c65aca8 Mon Sep 17 00:00:00 2001 From: Evgeny Blokhin Date: Sun, 21 Jan 2024 17:54:47 +0100 Subject: [PATCH 2/2] =?UTF-8?q?Add=20Snyk=E2=80=99s=20update?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 3f5e308..f0f51af 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,4 +4,4 @@ ase mpds_client shapely[vectorized] scipy -pillow>=10.2.0 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file +pillow >= 10.2.0