fix: requirements-nginx.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-DNSPYTHON-6241713 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321964 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321966 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321970 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6035177
marketcalls · Mar 13, 2024 · cca5627 · cca5627
1 parent 4882b9a
commit cca5627
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/requirements-nginx.txt b/requirements-nginx.txt
@@ -12,4 +12,7 @@ pyngrok
 SQLAlchemy
 cachetools
 gunicorn
-eventlet
+eventlet
+dnspython>=2.6.1 # not directly required, pinned by Snyk to avoid a vulnerability
+numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability
+werkzeug>=2.3.8 # not directly required, pinned by Snyk to avoid a vulnerability