From 4524d8b1b039ed1b3ec1ccaa04b2f062782d8b95 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 4 Apr 2024 18:01:02 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6182918 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219984 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219986 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6514866 --- requirements.txt | 1 + 1 file changed, 1 insertion(+) mode change 100755 => 100644 requirements.txt diff --git a/requirements.txt b/requirements.txt old mode 100755 new mode 100644 index c8e8505831..41cd018cd4 --- a/requirements.txt +++ b/requirements.txt @@ -19,3 +19,4 @@ face_recognition # If you are looking for dependencies for a manual install, # you may want to install tensorflow-gpu==1.4.0 for CUDA 8.0 or tensorflow-gpu>=1.6.0 for CUDA 9.0 # NB: MTCNN will not work with tensorflow releases prior to 1.6.0 +pillow>=10.3.0 # not directly required, pinned by Snyk to avoid a vulnerability