From 7331d013454158c5af479298cd362e8b9e118ac9 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 6 Sep 2021 21:57:53 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PYYAML-550022 - https://snyk.io/vuln/SNYK-PYTHON-PYYAML-559098 - https://snyk.io/vuln/SNYK-PYTHON-PYYAML-590151 --- requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements.txt b/requirements.txt index a0f5fe5..a08f68c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7,3 +7,4 @@ scikit_learn==0.22.1 flask==1.1.1 chatterbot==1.0.5 chatterbot-corpus==1.2.0 +pyyaml>=5.2 # not directly required, pinned by Snyk to avoid a vulnerability