From d25ec41408be49a056d51c2107dd82448efea4b5 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 5 Jan 2025 00:35:31 +0000 Subject: [PATCH] fix: node/calico_test/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-3164749 - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-5805047 - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-7430173 - https://snyk.io/vuln/SNYK-PYTHON-IDNA-6597975 - https://snyk.io/vuln/SNYK-PYTHON-JSONPICKLE-8136229 - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-5595532 - https://snyk.io/vuln/SNYK-PYTHON-RSA-1038401 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482 - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899 --- node/calico_test/requirements.txt | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/node/calico_test/requirements.txt b/node/calico_test/requirements.txt index c1840d28f50..401598e52f1 100644 --- a/node/calico_test/requirements.txt +++ b/node/calico_test/requirements.txt @@ -7,3 +7,10 @@ simplejson==3.13.2 deepdiff==3.3.0 kubernetes pytest +certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerability +idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability +jsonpickle>=3.3.0 # not directly required, pinned by Snyk to avoid a vulnerability +requests>=2.31.0 # not directly required, pinned by Snyk to avoid a vulnerability +rsa>=4.7 # not directly required, pinned by Snyk to avoid a vulnerability +setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability +zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability