From a4e2fd536410af2b287a6d31cf1186697969b381 Mon Sep 17 00:00:00 2001 From: tmikuska <44396040+tmikuska@users.noreply.github.com> Date: Tue, 3 Oct 2023 17:25:42 +0200 Subject: [PATCH] Upgrade vulnerable urllib3 library (#58) --- poetry.lock | 8 ++++---- pyproject.toml | 2 ++ 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/poetry.lock b/poetry.lock index 8a0e4df..9ce9e34 100644 --- a/poetry.lock +++ b/poetry.lock @@ -1133,14 +1133,14 @@ dev = ["setuptools", "pip", "wheel", "coverage", "restview", "sphinx", "sphinxco [[package]] name = "urllib3" -version = "1.26.15" +version = "1.26.17" description = "HTTP library with thread-safe connection pooling, file post, and more." category = "main" -optional = true +optional = false python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*, !=3.5.*" [package.extras] -brotli = ["brotlicffi (>=0.8.0)", "brotli (>=1.0.9)", "brotlipy (>=0.6.0)"] +brotli = ["brotlicffi (>=0.8.0)", "brotli (==1.0.9)", "brotlipy (>=0.6.0)", "brotli (>=1.0.9)"] secure = ["pyOpenSSL (>=0.14)", "cryptography (>=1.3.4)", "idna (>=2.0.0)", "certifi", "urllib3-secure-extra", "ipaddress"] socks = ["PySocks (>=1.5.6,!=1.5.7,<2.0)"] @@ -1213,7 +1213,7 @@ pyats = ["pyats"] [metadata] lock-version = "1.1" python-versions = "^3.8.1" -content-hash = "faf4e2850830c92e5e6df0dacfd32c3e103c67194b491c9841ddae8f151dfb2e" +content-hash = "ace151bdcad40eb78cf9f7f6ac32a733663aec0b6c562300c8f4dbf168818ac7" [metadata.files] aiofiles = [] diff --git a/pyproject.toml b/pyproject.toml index 1a8946a..0a0d4c0 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -22,6 +22,8 @@ classifiers = [ [tool.poetry.dependencies] python = "^3.8.1" httpx = "^0.24.0" +# SIMPLE-5904 +urllib3 = "^1" # optional package for events aiohttp = {version = "*", optional = true}