From 90ca147a0da097d0728e202b7279742ef978139a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 14 Jul 2025 21:48:06 +0000 Subject: [PATCH] fix: references/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PROTOBUF-10364902 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-10390193 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-10390194 --- references/requirements.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/references/requirements.txt b/references/requirements.txt index a4515bfbd8..edaed78828 100644 --- a/references/requirements.txt +++ b/references/requirements.txt @@ -3,3 +3,5 @@ fastprogress>=0.1.21 wandb>=0.10.31 psutil>=5.9.0 clearml>=1.11.1 +protobuf>=4.25.8 # not directly required, pinned by Snyk to avoid a vulnerability +urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability