New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

fix: requirements.txt to reduce vulnerabilities #227

Open

Ma5onic wants to merge 2 commits into spotify:master from Ma5onic:master

Ma5onic commented Jul 28, 2022

pyarrow>=0.15.1 # not directly required, pinned by Snyk to avoid a vulnerability
pyyaml>=5.4 # not directly required, pinned by Snyk to avoid a vulnerability

snyk-bot and others added 2 commits

July 28, 2022 08:31


          fix: requirements.txt to reduce vulnerabilities

37bcd89

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-PYARROW-483024
- https://snyk.io/vuln/SNYK-PYTHON-PYARROW-483026
- https://snyk.io/vuln/SNYK-PYTHON-PYYAML-42159
- https://snyk.io/vuln/SNYK-PYTHON-PYYAML-559098
- https://snyk.io/vuln/SNYK-PYTHON-PYYAML-590151
- https://snyk.io/vuln/SNYK-PYTHON-SCIKITLEARN-1079100


          Merge pull request #1 from Ma5onic/snyk-fix-782bd55667fd9c9127e523ffe…

6cd07f5

…3bb0476

[Snyk] Fix for 6 vulnerabilities

# for free to join this conversation on GitHub. Already have an account? # to comment

Labels

None yet