From 7cbf249514d62b204ace347e4b153ec728b6762a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 19 Feb 2023 20:28:47 +0000 Subject: [PATCH] fix: engage-project/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321964 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321966 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321970 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412 --- engage-project/requirements.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/engage-project/requirements.txt b/engage-project/requirements.txt index 400e798..0d23c92 100644 --- a/engage-project/requirements.txt +++ b/engage-project/requirements.txt @@ -3,7 +3,7 @@ joblib==1.0.1 keras==2.4.3 matplotlib==3.4.2 numba==0.53.1 -numpy==1.21.1 +numpy==1.22.2 pandas==1.3.0 pandasql==0.7.3 patsy==0.5.1 @@ -12,3 +12,4 @@ scipy==1.7.0 statsmodels==0.12.2 tensorflow==2.5.0 tqdm==4.61.2 +setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability