fix: machine-learning/hog-feature-extraction/requirements.txt to reduce vulnerabilities

snyk-bot · snyk-bot · commit ff98c09486a7 · 2022-02-21T16:20:41.000Z
The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-2331901
diff --git a/machine-learning/hog-feature-extraction/requirements.txt b/machine-learning/hog-feature-extraction/requirements.txt
@@ -1,2 +1,3 @@
 scikit-image
-matplotlib
+matplotlib
+pillow>=9.0.0 # not directly required, pinned by Snyk to avoid a vulnerability
