snyk-bot commited on
Commit
f61858c
1 Parent(s): 9869b56

fix: requirements.txt to reduce vulnerabilities

Browse files

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321964
- https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321966
- https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321970
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-5918878
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6043904
- https://snyk.io/vuln/SNYK-PYTHON-PYARROW-6052811

Files changed (1) hide show
  1. requirements.txt +1 -1
requirements.txt CHANGED
@@ -4,7 +4,7 @@ langchain==0.0.330
4
  langsmith==0.0.57
5
  numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability
6
  openai==0.28.1
7
- pillow>=10.0.0 # not directly required, pinned by Snyk to avoid a vulnerability
8
  pyarrow>=14.0.1 # not directly required, pinned by Snyk to avoid a vulnerability
9
  pypdf==3.17.0
10
  rank_bm25==0.2.2
 
4
  langsmith==0.0.57
5
  numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability
6
  openai==0.28.1
7
+ pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability
8
  pyarrow>=14.0.1 # not directly required, pinned by Snyk to avoid a vulnerability
9
  pypdf==3.17.0
10
  rank_bm25==0.2.2