From d43f4789f4f69b38fcf3e3a2fd8ce311c9979341 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 4 Nov 2023 04:41:26 +0000 Subject: [PATCH] fix: google/test-fixtures/appengine/hello-world-flask/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6041510 --- .../test-fixtures/appengine/hello-world-flask/requirements.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/google/test-fixtures/appengine/hello-world-flask/requirements.txt b/google/test-fixtures/appengine/hello-world-flask/requirements.txt index f358d0ad8e4..59ec9929ff6 100644 --- a/google/test-fixtures/appengine/hello-world-flask/requirements.txt +++ b/google/test-fixtures/appengine/hello-world-flask/requirements.txt @@ -1,2 +1,3 @@ Flask==1.1.1 -gunicorn==20.0.4 \ No newline at end of file +gunicorn==20.0.4 +werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file