From 9198507b391f8e44c3c352bdb2d3d768faa257c0 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 18 Jun 2026 19:35:02 +0000 Subject: [PATCH] fix: requirements/base.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-17356157 --- requirements/base.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements/base.txt b/requirements/base.txt index c654bf45..a807b65a 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -104,3 +104,4 @@ citeproc-py-styles==0.1.5 # https://pypi.org/project/citeproc-py-styles/ (bibte # Math analysis and formulas evaluation sympy==1.13.3 # https://pypi.org/project/sympy/ +tornado>=6.5.7 # not directly required, pinned by Snyk to avoid a vulnerability