fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-8400708
oda-hub · Dec 5, 2024 · eded5f1 · eded5f1
1 parent b8868e0
commit eded5f1
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/requirements.txt b/requirements.txt
@@ -38,4 +38,5 @@ simple_logger
 matplotlib
 validators==0.28.3
 pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability
-zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability
+tornado>=6.4.2 # not directly required, pinned by Snyk to avoid a vulnerability