From ce90cc3e811d75dfa0ce730727fb3a6bf1e898be Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 9 Jan 2026 08:13:23 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871873 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871876 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871877 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871888 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871929 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871954 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871979 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14872000 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14896210 --- requirements.txt | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 3216958..404c1b8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -35,4 +35,6 @@ httpx[http2] # a2a (unofficial, stub if not on PyPI) # For any additional plugins (add as needed) # Add other packages here as you expand functionality -# supabase_py_vault removed: not on PyPI \ No newline at end of file +# supabase_py_vault removed: not on PyPI +aiohttp>=3.13.3 # not directly required, pinned by Snyk to avoid a vulnerability +urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file