fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-JINJA2-6809379 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6808933
puya310 · May 7, 2024 · 204cefb · 204cefb
1 parent 4c339cb
commit 204cefb
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/requirements.txt b/requirements.txt
@@ -9,7 +9,8 @@ gunicorn
 django-heroku
 whitenoise
 django-allauth
-Jinja2==2.7.2
+Jinja2==3.1.4
 python-etcd==0.4.5
 urllib3==1.25.9
 #test push should not push ddd
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability