From 081b25ef44837cfd5005bea94cbc56e8f082b1d3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Brunner?= Date: Fri, 4 Oct 2024 09:22:15 +0200 Subject: [PATCH] [MEDIUM] virtualenv@20.13.4: SNYK-PYTHON-VIRTUALENV-8136228 CWE-78 [Fixed in: 20.26.6]. --- docker/qgisserver/requirements.txt | 1 + .../c2cgeoportal_geoportal/scaffolds/create/ci/requirements.txt | 1 + 2 files changed, 2 insertions(+) diff --git a/docker/qgisserver/requirements.txt b/docker/qgisserver/requirements.txt index 40ca41cd4c..6ea39db47d 100644 --- a/docker/qgisserver/requirements.txt +++ b/docker/qgisserver/requirements.txt @@ -2,3 +2,4 @@ wheel==0.37.1 pipenv==2022.1.8 pip>=21.1 # not directly required, pinned by Snyk to avoid a vulnerability certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerability +virtualenv>=20.26.6 # not directly required, pinned by Snyk to avoid a vulnerability diff --git a/geoportal/c2cgeoportal_geoportal/scaffolds/create/ci/requirements.txt b/geoportal/c2cgeoportal_geoportal/scaffolds/create/ci/requirements.txt index 2a2f3d2966..885c2b14ce 100644 --- a/geoportal/c2cgeoportal_geoportal/scaffolds/create/ci/requirements.txt +++ b/geoportal/c2cgeoportal_geoportal/scaffolds/create/ci/requirements.txt @@ -1,2 +1,3 @@ c2cciutils==1.0 cryptography>=43.0.1 # not directly required, pinned by Snyk to avoid a vulnerability +virtualenv>=20.26.6 # not directly required, pinned by Snyk to avoid a vulnerability