From 368ba2c1600730dd49dae400f6d042c6e3744a7f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 25 Mar 2026 22:47:57 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-NLTK-15692478 - https://snyk.io/vuln/SNYK-PYTHON-NLTK-15692479 - https://snyk.io/vuln/SNYK-PYTHON-NLTK-15692504 - https://snyk.io/vuln/SNYK-PYTHON-NLTK-15692505 - https://snyk.io/vuln/SNYK-PYTHON-NLTK-15763329 - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-15763443 --- requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index f2cd9e9..b202505 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,7 +11,7 @@ click==8.0.1 MarkupSafe==2.0.1 # HTTP Libraries with CVEs -requests==2.26.0 +requests==2.33.0 urllib3==1.26.5 httplib2==0.19.1 certifi==2021.5.30 @@ -292,7 +292,7 @@ python-pptx==0.6.19 # Additional high-CVE packages # aiohttp==3.7.4 # Already installed above -nltk==3.6.2 +nltk==3.9.4 # transformers==4.11.0 # Requires torch, too large # tensorflow==2.6.0 # Native deps, won't build on Python 3.13 # scikit-learn==0.24.2 # Native deps