From f9fc3c16c2cf783d0448613157c5d0d8bea75ab2 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Tue, 11 Jan 2022 23:04:19 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-2331901
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-2331905
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-2331907
---
 requirements.txt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/requirements.txt b/requirements.txt
index b860adc..6ce180c 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -3,3 +3,4 @@ scikit-image
 scipy
 autopep8
 bash_kernel
+pillow>=9.0.0 # not directly required, pinned by Snyk to avoid a vulnerability