Fix upstream CVE-2019-11324 issue

Urllib3 had CVE-2019-11324 that `requests` uses so we now pin for the fixed version to ensure we don't get the faulty dependency. Upstream: https://github.com/kennethreitz/requests/issues/5065
cyberark · Apr 30, 2019 · 33f1781 · 33f1781
1 parent 49b9052
commit 33f1781
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/requirements.txt b/requirements.txt
@@ -4,3 +4,6 @@ pylint>=2.3.1
 PyInstaller>=3.4
 PyYAML>=3.13
 requests>=2.21.0
+
+# https://github.com/kennethreitz/requests/issues/5065
+urllib3>=1.24.2,<1.25