From acc3fdfabac7fcd93df3235c0eee8c0e3b5e0b1f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 26 Jan 2024 07:17:35 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-5798483 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6057353 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091621 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091622 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091623 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-5813745 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-5813746 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-5813750 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-5914629 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6036192 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6092044 --- requirements.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements.txt b/requirements.txt index 9d47890d3db..1b6e97dbbbb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,9 +4,9 @@ pandas-ta==0.3.14b ccxt==3.1.44 -cryptography==41.0.2; platform_machine != 'armv7l' -cryptography==41.0.2; platform_machine == 'armv7l' -aiohttp==3.8.4 +cryptography==41.0.6; platform_machine != 'armv7l' +cryptography==41.0.6; platform_machine == 'armv7l' +aiohttp==3.9.0 SQLAlchemy==2.0.16 python-telegram-bot==20.3