From fff63ac5efeb00d15b92371374147dc84e0061e0 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Sun, 13 Nov 2022 19:40:32 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-PYYAML-590151
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-1533435
---
 requirements.txt | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 7964b28e3c..06e95daf1b 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -21,7 +21,7 @@ pre-commit==2.4.0
 pyrsistent==0.16.0
 python-dateutil==2.8.1
 pytz==2020.1
-PyYAML==5.3.1
+PyYAML==5.4
 requests==2.23.0
 scandir==1.10.0
 semantic-version==2.8.5
@@ -32,6 +32,6 @@ stix2-patterns==1.3.0
 taxii2-client==2.0.0
 toml==0.10.0
 typing==3.7.4.1
-urllib3==1.25.9
+urllib3==1.26.5
 virtualenv==20.0.21
 zipp==3.1.0