From f3dfe0857b6c3c80b490596e99acd0b4d304d0ec Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 10 Jul 2024 04:24:38 +0000 Subject: [PATCH 1/2] fix: panda/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899 --- panda/requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/panda/requirements.txt b/panda/requirements.txt index 2f479710add053..c14f6f843f1e29 100644 --- a/panda/requirements.txt +++ b/panda/requirements.txt @@ -11,3 +11,4 @@ cffi==1.11.4 crcmod pre-commit==2.4.0 pylint==2.5.2 +zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability From 6c959dec72640b8ed5f51b6f97df0701b7759027 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 8 Feb 2026 09:13:33 +0000 Subject: [PATCH 2/2] fix: panda/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899