From a01d4b73f02524aebb808d36341da27b4d833bca Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 7 Aug 2024 09:16:52 +0000 Subject: [PATCH] fix: requirements/production.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7642790 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7642791 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7642813 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7642814 --- requirements/production.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements/production.txt b/requirements/production.txt index 6a1add2..a0603b1 100644 --- a/requirements/production.txt +++ b/requirements/production.txt @@ -9,3 +9,4 @@ sentry-sdk==1.11.1 # https://github.com/getsentry/sentry-python # ------------------------------------------------------------------------------ django-anymail==8.6 # https://github.com/anymail/django-anymail setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability +django>=4.2.15 # not directly required, pinned by Snyk to avoid a vulnerability