From 75c7ba0b5aa8df03d8aae6efe81c69fcde667f15 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 10 Sep 2025 10:56:22 +0000 Subject: [PATCH] fix: src/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321964 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321966 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321969 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321970 - https://snyk.io/vuln/SNYK-PYTHON-PYLINT-1089548 - https://snyk.io/vuln/SNYK-PYTHON-PYLINT-609883 - https://snyk.io/vuln/SNYK-PYTHON-PYLINT-6514864 - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899 --- src/requirements.txt | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/src/requirements.txt b/src/requirements.txt index 8a35518..2c21a73 100644 --- a/src/requirements.txt +++ b/src/requirements.txt @@ -1,8 +1,9 @@ matplotlib==3.0.3 -numpy==1.16.3 -pylint==2.5.0 +numpy==1.22.2 +pylint==2.7.0 pytest==4.3.0 networkx==2.2 tabulate==0.8.3 pandas==0.24.2 -tsplib95==0.3.3 \ No newline at end of file +tsplib95==0.3.3 +zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file