From 398282b3a2e69deb972cc911be6af93a85e77e80 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 12 Dec 2025 11:10:08 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192442
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192443
- https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-14151620
---
 requirements.txt | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 4e2866a..a38449f 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -6,9 +6,10 @@ face_recognition==1.3.0
 redis==4.1.2
 Flask_MonitoringDashboard==3.1.1
 Flask==1.1.2
-Werkzeug==2.0.3
+Werkzeug==3.1.4
 tqdm==4.62.3
 olefile==0.46
 Pillow==8.3.2
 py-bcrypt==0.4
-scikit_learn==0.22.2.post1
\ No newline at end of file
+scikit_learn==0.22.2.post1
+urllib3>=2.6.0 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file