Commit 1c9183d
Fix CVE-2023-45803 and CVE-2024-37891 by updating urllib3 constraint
- Update urllib3 from pinned version 2.0.6 to >=2.2.2,<3.0.0
- CVE-2023-45803: Fixed in urllib3 2.0.7 and 1.26.18
- CVE-2024-37891: Fixed in urllib3 2.2.2 and 1.26.19
- Add upper bound <3.0.0 to prevent breaking changes from future major versions
- Tested with Python 3.9 - no dependency conflicts
Co-Authored-By: Yosef Arbiv <[email protected]>1 parent db1ea97 commit 1c9183d
1 file changed
+3
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
3 | 3 | | |
4 | 4 | | |
5 | 5 | | |
6 | | - | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
0 commit comments