snyk-bot
commited on
fix: requirements.txt to reduce vulnerabilities
Browse filesThe following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321964
- https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321966
- https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321970
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-5918878
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6043904
- https://snyk.io/vuln/SNYK-PYTHON-PYARROW-6052811
- requirements.txt +1 -1
requirements.txt
CHANGED
@@ -4,7 +4,7 @@ langchain==0.0.330
|
|
4 |
langsmith==0.0.57
|
5 |
numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability
|
6 |
openai==0.28.1
|
7 |
-
pillow>=10.0.
|
8 |
pyarrow>=14.0.1 # not directly required, pinned by Snyk to avoid a vulnerability
|
9 |
pypdf==3.17.0
|
10 |
rank_bm25==0.2.2
|
|
|
4 |
langsmith==0.0.57
|
5 |
numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability
|
6 |
openai==0.28.1
|
7 |
+
pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability
|
8 |
pyarrow>=14.0.1 # not directly required, pinned by Snyk to avoid a vulnerability
|
9 |
pypdf==3.17.0
|
10 |
rank_bm25==0.2.2
|