From b09e59c0e357eb1d3b8a553ddc71dfca8d0a5fbf Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 17 Jul 2026 22:38:49 +0000 Subject: [PATCH] fix: requirements-dev.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-17972376 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-17972377 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-17972384 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-17972386 --- requirements-dev.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements-dev.txt b/requirements-dev.txt index b2518f2910..d95fc8d78c 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -45,3 +45,4 @@ jupyterlab>=4.4.8 # not directly required, pinned by Snyk to avoid a vulnerabili zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability fonttools>=4.61.0 # not directly required, pinned by Snyk to avoid a vulnerability tornado>=6.5.3 # not directly required, pinned by Snyk to avoid a vulnerability +pillow>=12.3.0 # not directly required, pinned by Snyk to avoid a vulnerability