From d3b5a4d7037806e10997a1a0ab4fe1bbcef43d56 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 10 Jul 2024 06:10:38 +0000 Subject: [PATCH 1/2] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899 --- requirements.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 60439f7a..d221e5e1 100644 --- a/requirements.txt +++ b/requirements.txt @@ -18,4 +18,5 @@ scipy numba tensorboard #pybullet -#gym #git clone https://github.com/openai/gym.git #cd gym #pip install -e . \ No newline at end of file +#gym #git clone https://github.com/openai/gym.git #cd gym #pip install -e . +zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file From 711cfd52454a74ab76598155f2fa6633224df8c2 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 9 Feb 2026 12:13:21 +0000 Subject: [PATCH 2/2] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899