[Snyk] Fix for 41 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • requirements.txt

⚠️ Warning

requests 2.21.0 has requirement urllib3<1.25,>=1.21.1, but you have urllib3 1.26.7.

Vulnerabilities that will be fixed

By pinning:

Severity	Issue	Upgrade	Breaking Change	Exploit Maturity
	Directory Traversal SNYK-PYTHON-BABEL-1278589	babel: 2.6.0 -> 2.9.1	No	No Known Exploit
	Information Exposure SNYK-PYTHON-GEVENT-40735	gevent: 1.1.2 -> 1.2a1	No	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-PYTHON-JINJA2-1012994	jinja2: 2.10.1 -> 2.11.3	No	Proof of Concept
	Cross-site Scripting (XSS) SNYK-PYTHON-LXML-1047473	lxml: 3.7.1 -> 4.6.2	No	No Known Exploit
	Arbitrary File Write SNYK-PYTHON-LXML-1047474	lxml: 3.7.1 -> 4.6.2	No	No Known Exploit
	Cross-site Scripting (XSS) SNYK-PYTHON-LXML-1088006	lxml: 3.7.1 -> 4.6.2	No	No Known Exploit
	Cross-site Scripting (XSS) SNYK-PYTHON-LXML-72651	lxml: 3.7.1 -> 4.6.2	No	No Known Exploit
	Cryptographic Weakness SNYK-PYTHON-PASSLIB-569603	passlib: 1.7.1 -> 1.7.3	No	No Known Exploit
	Out-of-bounds Read SNYK-PYTHON-PILLOW-1055461	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Out-of-bounds Read SNYK-PYTHON-PILLOW-1055462	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Out-of-bounds Read SNYK-PYTHON-PILLOW-1080635	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-PYTHON-PILLOW-1080654	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Denial of Service (DoS) SNYK-PYTHON-PILLOW-1081494	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Denial of Service (DoS) SNYK-PYTHON-PILLOW-1081501	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Denial of Service (DoS) SNYK-PYTHON-PILLOW-1081502	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Heap-based Buffer Overflow SNYK-PYTHON-PILLOW-1082329	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Insufficient Validation SNYK-PYTHON-PILLOW-1082750	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Denial of Service (DoS) SNYK-PYTHON-PILLOW-1090584	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Denial of Service (DoS) SNYK-PYTHON-PILLOW-1090586	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Denial of Service (DoS) SNYK-PYTHON-PILLOW-1090587	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Denial of Service (DoS) SNYK-PYTHON-PILLOW-1090588	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Out-of-bounds Read SNYK-PYTHON-PILLOW-1292150	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Out-of-bounds Read SNYK-PYTHON-PILLOW-1292151	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Buffer Overflow SNYK-PYTHON-PILLOW-1316216	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-PYTHON-PILLOW-1319443	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Allocation of Resources Without Limits or Throttling SNYK-PYTHON-PILLOW-536096	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Denial of Service (DoS) SNYK-PYTHON-PILLOW-540746	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Buffer Overflow SNYK-PYTHON-PILLOW-541323	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Buffer Overflow SNYK-PYTHON-PILLOW-541324	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Buffer Overflow SNYK-PYTHON-PILLOW-541325	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Integer Overflow SNYK-PYTHON-PILLOW-541326	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Out-of-Bounds SNYK-PYTHON-PILLOW-574573	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Out-of-bounds Read SNYK-PYTHON-PILLOW-574574	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Out-of-bounds Read SNYK-PYTHON-PILLOW-574575	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Out-of-bounds Read SNYK-PYTHON-PILLOW-574576	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Buffer Overflow SNYK-PYTHON-PILLOW-574577	pillow: 5.4.1 -> 8.1.0	No	No Known Exploit
	Double Free SNYK-PYTHON-PSUTIL-483082	psutil: 5.6.6 -> 5.6.7	No	No Known Exploit
	Server-side Request Forgery (SSRF) SNYK-PYTHON-REPORTLAB-1022145	reportlab: 3.5.13 -> 3.5.55	No	Proof of Concept
	Remote Code Execution (RCE) SNYK-PYTHON-REPORTLAB-473444	reportlab: 3.5.13 -> 3.5.55	No	Proof of Concept
	HTTP Header Injection SNYK-PYTHON-URLLIB3-1014645	urllib3: 1.24.3 -> 1.25.9	No	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-PYTHON-URLLIB3-1533435	urllib3: 1.24.3 -> 1.25.9	No	No Known Exploit

Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the effected dependencies could be upgraded.

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic