fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-5918878
oda-hub · Sep 26, 2023 · 6ca6be3 · 6ca6be3
1 parent 96cc9ce
commit 6ca6be3
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/requirements.txt b/requirements.txt
@@ -36,4 +36,5 @@ MarkupSafe==2.0.1
 # TODO: needed by some plugins: migrate
 simple_logger
 matplotlib
-validators==0.20.0
+validators==0.20.0
+pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability