From dfba982e2cbb1595a9a1fe82f1e8a99583ff226d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 12 Dec 2025 10:10:27 +0000 Subject: [PATCH] fix: backend/classifier/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192442 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192443 --- backend/classifier/requirements.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/backend/classifier/requirements.txt b/backend/classifier/requirements.txt index 73f1190..06310e0 100644 --- a/backend/classifier/requirements.txt +++ b/backend/classifier/requirements.txt @@ -8,4 +8,5 @@ pandas>=2.3.3 matplotlib>=3.10.7 kaggle>=1.7.4.5 spacy -https://github.com/explosion/spacy-models/releases/download/en_core_web_sm-3.7.0/en_core_web_sm-3.7.0.tar.gz#egg=en_core_web_sm \ No newline at end of file +https://github.com/explosion/spacy-models/releases/download/en_core_web_sm-3.7.0/en_core_web_sm-3.7.0.tar.gz#egg=en_core_web_sm +urllib3>=2.6.0 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file