fix: server/requirements-dev.txt to reduce vulnerabilities (#2055)

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-RSA-1038401 Co-authored-by: snyk-bot <snyk-bot@snyk.io> Co-authored-by: Madison Dunitz <madison.dunitz@chanzuckerberg.com>
chanzuckerberg · Feb 25, 2021 · 09466a5 · 09466a5
1 parent de571ce
commit 09466a5
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/server/requirements-dev.txt b/server/requirements-dev.txt
@@ -8,3 +8,4 @@ pytest>=3.6.3
 python-jose>=3.2.0
 twine>=1.12.1
 -r requirements.txt
+rsa>=4.7 # not directly required, pinned by Snyk to avoid a vulnerability