From d21ba39c5e2d9fca7cdd9a5a4ed87467ab0d550e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 17 Jul 2026 22:35:06 +0000 Subject: [PATCH] fix: doc/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-JUPYTERSERVER-16425698 - https://snyk.io/vuln/SNYK-PYTHON-JUPYTERSERVER-17152947 - https://snyk.io/vuln/SNYK-PYTHON-MISTUNE-16438944 - https://snyk.io/vuln/SNYK-PYTHON-MISTUNE-17895066 - https://snyk.io/vuln/SNYK-PYTHON-MISTUNE-17895069 - https://snyk.io/vuln/SNYK-PYTHON-MISTUNE-17895071 - https://snyk.io/vuln/SNYK-PYTHON-NBCONVERT-14463457 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-17972376 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-17972377 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-17972384 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-17972386 - https://snyk.io/vuln/SNYK-PYTHON-SOUPSIEVE-17911084 - https://snyk.io/vuln/SNYK-PYTHON-SOUPSIEVE-17911087 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-14400979 --- doc/requirements.txt | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/doc/requirements.txt b/doc/requirements.txt index 623454cb4a..b78e4d7fa6 100644 --- a/doc/requirements.txt +++ b/doc/requirements.txt @@ -14,4 +14,9 @@ mypy_extensions>=0.4 # mistune<2 jupyterlab>=4.4.8 # not directly required, pinned by Snyk to avoid a vulnerability fonttools>=4.62.0 # not directly required, pinned by Snyk to avoid a vulnerability -jupyter-server>=2.18.0 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file +jupyter-server>=2.18.2 # not directly required, pinned by Snyk to avoid a vulnerability +mistune>=3.3.0 # not directly required, pinned by Snyk to avoid a vulnerability +nbconvert>=7.17.0 # not directly required, pinned by Snyk to avoid a vulnerability +pillow>=12.3.0 # not directly required, pinned by Snyk to avoid a vulnerability +soupsieve>=2.8.4 # not directly required, pinned by Snyk to avoid a vulnerability +tornado>=6.5.3 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file