From 609c6eedc35063845141f93f209ca70ce91eb83f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 9 Nov 2022 00:40:44 +0000 Subject: [PATCH] fix: scrapers/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-1022152 - https://snyk.io/vuln/SNYK-PYTHON-LXML-1047473 - https://snyk.io/vuln/SNYK-PYTHON-LXML-1047474 - https://snyk.io/vuln/SNYK-PYTHON-LXML-1088006 - https://snyk.io/vuln/SNYK-PYTHON-LXML-2316995 - https://snyk.io/vuln/SNYK-PYTHON-LXML-2940874 --- scrapers/requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/scrapers/requirements.txt b/scrapers/requirements.txt index 6d42a8c..effdd26 100644 --- a/scrapers/requirements.txt +++ b/scrapers/requirements.txt @@ -4,14 +4,14 @@ attrs==18.2.0 Automat==0.7.0 cffi==1.11.5 constantly==15.1.0 -cryptography==2.3.1 +cryptography==3.2 cssselect==1.0.3 hyperlink==18.0.0 idna==2.7 incremental==17.5.0 isort==4.3.4 lazy-object-proxy==1.3.1 -lxml==4.2.5 +lxml==4.9.1 mccabe==0.6.1 parsel==1.5.0 pyasn1==0.4.4