From 0cf9bd0511439c77b04b460bda50a526209fb107 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Wed, 10 Dec 2025 11:17:00 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-SQLPARSE-14157217
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192442
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192443
---
 requirements.txt | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 3150e0c..51e5c6c 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -20,4 +20,6 @@ SolrClient2
 termcolor
 Unidecode
 uWSGI==2.0.28; sys_platform == 'linux'
-#git+https://github.com/thriuin/SolrClient.git@master
\ No newline at end of file
+#git+https://github.com/thriuin/SolrClient.git@master
+sqlparse>=0.5.4 # not directly required, pinned by Snyk to avoid a vulnerability
+urllib3>=2.6.0 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file