From f4f11c7cf974a88f3d9909b01f5fa29201d5c669 Mon Sep 17 00:00:00 2001 From: "snyk-io[bot]" <141718529+snyk-io[bot]@users.noreply.github.com> Date: Mon, 8 Dec 2025 03:14:50 +0000 Subject: [PATCH] fix: django/honeycomics/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192442 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192443 --- django/honeycomics/requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/django/honeycomics/requirements.txt b/django/honeycomics/requirements.txt index ff48745..e7d62f2 100644 --- a/django/honeycomics/requirements.txt +++ b/django/honeycomics/requirements.txt @@ -1,3 +1,4 @@ chargebee==2.30.0 Django==4.2.5 requests==2.31.0 +urllib3>=2.6.0 # not directly required, pinned by Snyk to avoid a vulnerability