From 320484db8a922738473ff3ed3c5434806769301c Mon Sep 17 00:00:00 2001 From: snyk-bot <snyk-bot@snyk.io> Date: Wed, 18 Jun 2025 10:54:47 +0000 Subject: [PATCH] fix: cmd/python/functions_framework_compat/converter/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PROTOBUF-10364902 - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-10305723 --- .../functions_framework_compat/converter/requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cmd/python/functions_framework_compat/converter/requirements.txt b/cmd/python/functions_framework_compat/converter/requirements.txt index 98cde4c24..ce8d663a0 100644 --- a/cmd/python/functions_framework_compat/converter/requirements.txt +++ b/cmd/python/functions_framework_compat/converter/requirements.txt @@ -22,12 +22,12 @@ MarkupSafe==1.1.1 multidict==4.7.6 opencensus==0.7.9 opencensus-context==0.1.1 -protobuf==3.12.2 +protobuf==4.25.8 pyasn1==0.4.8 pyasn1-modules==0.2.8 pytz==2020.1 PyYAML==5.4 -requests==2.24.0 +requests==2.32.4 rsa==4.7 six==1.15.0 uritemplate==3.0.1