[MEDIUM] [email protected]: SNYK-PYTHON-VIRTUALENV-8136228 CWE-78 [F…

…ixed in: 20.26.6].

example-project/requirements.txt

@@ -1,8 +1,9 @@
-poetry==1.2.2
+poetry==1.5.1
 poetry-core>=1.1.0a7 # not directly required, pinned by Snyk to avoid a vulnerability
 setuptools==70.0.0
 requests>=2.31.0 # not directly required, pinned by Snyk to avoid a vulnerability
 certifi>=2022.12.7 # not directly required, pinned by Snyk to avoid a vulnerability
 urllib3>=1.26.17 # not directly required, pinned by Snyk to avoid a vulnerability
 idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability
 zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability
+virtualenv>=20.26.6 # not directly required, pinned by Snyk to avoid a vulnerability

requirements.txt

@@ -1,7 +1,7 @@
-poetry==1.4.2
-poetry-plugin-export==1.3.1
-poetry-dynamic-versioning[plugin]==0.20.0
-poetry-plugin-tweak-dependencies-version==1.3.0
+poetry==1.5.1
+poetry-plugin-export==1.4.0
+poetry-dynamic-versioning[plugin]==0.19.0
+poetry-plugin-tweak-dependencies-version==1.4.0
 pre-commit==3.8.0
 importlib-metadata<8.0.0>=7.0.0
 requests>=2.31.0 # not directly required, pinned by Snyk to avoid a vulnerability
@@ -10,3 +10,4 @@ urllib3>=1.26.17 # not directly required, pinned by Snyk to avoid a vulnerabilit
 jinja2>=3.1.3 # not directly required, pinned by Snyk to avoid a vulnerability
 idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability
 zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability
+virtualenv>=20.26.6 # not directly required, pinned by Snyk to avoid a vulnerability