Merge pull request #1021 from dapr/snyk-fix-43adbf2fda0a0da9ada93a13b…

…a657ce8 [Snyk] Security upgrade werkzeug from 2.2.3 to 3.0.3
dapr · Jan 23, 2025 · 74b7a5f · 74b7a5f
2 parents 1ff8f5f + 3e9182e
commit 74b7a5f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/service_invocation/python/http/order-processor/requirements.txt b/service_invocation/python/http/order-processor/requirements.txt
@@ -1,3 +1,4 @@
 Flask
 dapr
-typing-extensions
+typing-extensions
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability