Merge pull request #60 from Ouranosinc/snyk-fix-96f733857c2af26de7022…

…22952b1306b
Ouranosinc · Jun 21, 2024 · de71aa0 · de71aa0
2 parents 3044ad7 + 22cd832
commit de71aa0
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/CHANGES.rst b/CHANGES.rst
@@ -9,6 +9,7 @@ Changes
 
 Features / Changes
 ~~~~~~~~~~~~~~~~~~~~~
+* Pin ``urllib3>=2.2.2`` to address CVE-2024-37891.
 * Pin ``gunicorn>=22`` to address CVE-2024-1135.
 * Pin Docker base to ``python:3.11-alpine3.19`` for various security fixes.
 * Update ``magpie==4.0.0`` for corresponding fixes

diff --git a/requirements.txt b/requirements.txt
@@ -21,5 +21,6 @@ schema
 simplejson
 threddsclient==0.4.4
 typing_extensions
+urllib3>=2.2.2
 watchdog>=4
 webob