Skip to content

[Snyk] Security upgrade fonttools from 4.38.0 to 4.61.0 - #71

Open
0xSebin wants to merge 1 commit into
masterfrom
snyk-fix-1f53c9e14d95396a9fb0ca2b2e099009
Open

[Snyk] Security upgrade fonttools from 4.38.0 to 4.61.0#71
0xSebin wants to merge 1 commit into
masterfrom
snyk-fix-1f53c9e14d95396a9fb0ca2b2e099009

Conversation

@0xSebin

@0xSebin 0xSebin commented Jan 5, 2026

Copy link
Copy Markdown
Owner

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the pip dependencies of this project.

Snyk changed the following file(s):

  • docs/requirements.txt
鈿狅笍 Warning 
myst-parser 0.15.1 has requirement sphinx<5,>=3, but you have sphinx 5.3.0.
myst-parser 0.15.1 has requirement markdown-it-py<2.0.0,>=1.0.0, but you have markdown-it-py 2.2.0.
myst-parser 0.15.1 has requirement docutils<0.18,>=0.15, but you have docutils 0.19.
mdit-py-plugins 0.2.8 has requirement markdown-it-py~=1.0, but you have markdown-it-py 2.2.0.
furo 2023.8.17 has requirement sphinx<8.0,>=6.0, but you have sphinx 5.3.0.

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the affected dependencies could be upgraded.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
馃 View latest project report
馃摐 Customise PR templates
馃洜 Adjust project settings
馃摎 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

馃 XML Injection

@snyk-bot
fix: docs/requirements.txt to reduce vulnerabilities
1f6e674 
The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-FONTTOOLS-14151621
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@0xSebin @snyk-bot