fix: avoid CVEs reported by safety check (#353)

google · Oct 6, 2023 · fb35d87 · fb35d87
1 parent f7bb0d9
commit fb35d87
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/setup.cfg b/setup.cfg
@@ -55,6 +55,7 @@ install_requires =
     python-dateutil
     click
     setuptools >=65.5.1   # https://pyup.io/v/52495/f17 (reported by `safety check`)
+    certifi >=2023.07.22  # avoid CVE-2023-37920 (reported by `safety check`)
 
 [options.packages.find]
 exclude =
@@ -119,6 +120,7 @@ dev =
     types-protobuf
     pre-commit
     bandit
+    GitPython >=3.1.35  # avoid CVE-2023-41040, CVE-2023-40267 and CVE-2023-40590 (reported by `safety check`)
     safety
 
 [options.entry_points]