From 066acb662c9e225742e65ec9ef1c7f11f5c72358 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 4 Mar 2021 01:27:50 +0000
Subject: [PATCH] fix: Step-4-TrainingOverBLE/training/requirements.txt to
 reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-1081494
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-1081501
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-1081502
---
 Step-4-TrainingOverBLE/training/requirements.txt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Step-4-TrainingOverBLE/training/requirements.txt b/Step-4-TrainingOverBLE/training/requirements.txt
index ed3414e..25e75b6 100644
--- a/Step-4-TrainingOverBLE/training/requirements.txt
+++ b/Step-4-TrainingOverBLE/training/requirements.txt
@@ -2,4 +2,5 @@ numpy
 gym
 keras-rl
 theano
-pyserial
\ No newline at end of file
+pyserial
+pillow>=8.1.1 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file