From 5c89e36800c665f4e1588645d5c30f11dae9ea05 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 2 Apr 2024 19:54:02 +0000 Subject: [PATCH] fix: clang/utils/analyzer/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6514866 --- clang/utils/analyzer/requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/clang/utils/analyzer/requirements.txt b/clang/utils/analyzer/requirements.txt index 8ae8bc88ac..4ba218d811 100644 --- a/clang/utils/analyzer/requirements.txt +++ b/clang/utils/analyzer/requirements.txt @@ -4,3 +4,4 @@ matplotlib pandas psutil seaborn +pillow>=10.3.0 # not directly required, pinned by Snyk to avoid a vulnerability