From f70e4a26a98479074e9f3af4555bab7f3a980892 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 28 Nov 2024 00:05:07 +0000 Subject: [PATCH] fix: packages/python/plotly/test_requirements/requirements_37_optional.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-8400708 --- .../python/plotly/test_requirements/requirements_37_optional.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/packages/python/plotly/test_requirements/requirements_37_optional.txt b/packages/python/plotly/test_requirements/requirements_37_optional.txt index 8c33824da66..6c8fc903938 100644 --- a/packages/python/plotly/test_requirements/requirements_37_optional.txt +++ b/packages/python/plotly/test_requirements/requirements_37_optional.txt @@ -19,3 +19,4 @@ matplotlib==2.2.3 scikit-image==0.14.4 psutil==5.7.0 kaleido +tornado>=6.4.2 # not directly required, pinned by Snyk to avoid a vulnerability