DEV-ai/ultralytics_yolov5
1
0
Fork 0
mirror of https://github.com/ultralytics/yolov5.git synced 2026-01-09 06:11:59 +08:00
Code Issues Packages Projects Releases Wiki Activity

[Snyk] Security upgrade urllib3 from 2.0.7 to 2.5.0 (#13622)

Browse Source 
* fix: requirements.txt to reduce vulnerabilities


The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-10390193
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-10390194

* Apply suggestion from @Borda

Co-authored-by: Jirka Borovec <6035284+Borda@users.noreply.github.com>
Signed-off-by: Glenn Jocher <glenn.jocher@ultralytics.com>

---------

Signed-off-by: Glenn Jocher <glenn.jocher@ultralytics.com>
Co-authored-by: snyk-bot <snyk-bot@snyk.io>
Co-authored-by: Jirka Borovec <6035284+Borda@users.noreply.github.com>
This commit is contained in:
Glenn Jocher 2025-10-09 12:21:44 +02:00 committed by GitHub
parent a1019635c7
commit 6bb3d0c405
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
requirements.txt
View File

@ -48,3 +48,4 @@ setuptools>=70.0.0 # Snyk vulnerability fix
# mss # screenshots # mss # screenshots
# albumentations>=1.0.3 # albumentations>=1.0.3
# pycocotools>=2.0.6 # COCO mAP # pycocotools>=2.0.6 # COCO mAP
urllib3>=2.5.0 ; python_version > "3.8" # not directly required, pinned by Snyk to avoid a vulnerability