Skip to content

Commit e160076

Browse files
Fix CVE-2023-45803 and CVE-2024-37891 by updating urllib3 constraint (#886)
Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Co-authored-by: Yosef Arbiv <[email protected]>
1 parent 789a687 commit e160076

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

integration_tests/requirements.txt

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,4 +3,6 @@ pytest-xdist
33
pytest-parametrization
44
pytest-html
55
filelock
6-
urllib3==2.0.6
6+
# urllib3>=2.2.2 fixes CVE-2023-45803 and CVE-2024-37891
7+
# Upper bound <3.0.0 prevents breaking changes from future major versions
8+
urllib3>=2.2.2,<3.0.0

0 commit comments

Comments
 (0)