From 6a9ef46baa64a4006232f3a39ef75f9d36a285a9 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 9 Jan 2026 08:08:10 +0000 Subject: [PATCH] fix: server/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871873 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871876 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871877 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871888 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871929 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871954 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14871979 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-14872000 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14896210 --- server/requirements.txt | 2 ++ 1 file changed, 2 insertions(+) mode change 100755 => 100644 server/requirements.txt diff --git a/server/requirements.txt b/server/requirements.txt old mode 100755 new mode 100644 index 12a741f..eb9dfe7 --- a/server/requirements.txt +++ b/server/requirements.txt @@ -14,3 +14,5 @@ six==1.16.0 sseclient==0.0.27 torch==2.0.0 transformers==4.27.1 +aiohttp>=3.13.3 # not directly required, pinned by Snyk to avoid a vulnerability +urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability