From 5b09a8cd2e1c752e9f4cd0f34c040f051623f1f7 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 1 Feb 2024 18:29:21 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219984
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219986
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index fbcf566b7e254..0e42a8b517a40 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -13,7 +13,7 @@ MarkupSafe==0.23
 mock==2.0.0
 ofxparse==0.16
 passlib==1.6.5
-Pillow==3.4.1
+Pillow==10.2.0
 psutil==4.3.1
 psycogreen==1.0
 psycopg2==2.6.2