fix: requirements-to-freeze.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091621 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091622 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6035177
TwilioDevEd · Jan 11, 2024 · 8de29e1 · 8de29e1
1 parent 939d535
commit 8de29e1
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/requirements-to-freeze.txt b/requirements-to-freeze.txt
@@ -16,3 +16,5 @@ coverage
 # development
 flake8
 black
+aiohttp>=3.9.0 # not directly required, pinned by Snyk to avoid a vulnerability
+werkzeug>=2.3.8 # not directly required, pinned by Snyk to avoid a vulnerability