Skip to content
This repository has been archived by the owner on Apr 26, 2019. It is now read-only.

GitHub Vulnerability Alert: urllib3 version 1.22 #476

Open
corpetty opened this issue Dec 12, 2018 · 0 comments
Open

GitHub Vulnerability Alert: urllib3 version 1.22 #476

corpetty opened this issue Dec 12, 2018 · 0 comments

Comments

@corpetty
Copy link

Github has sent us a vulnerability alert of one of our dependencies: urllib3 version 1.22, which has been labeled High Severity.

You can find more information here.

Suggested fix from Github:

upgrade to urllib3>=1.23 in test/end-to-end/requirements.txt.

Notes: there seems to be breaking changes going to 1.23, and the current version is 1.24, so a few tests to make sure nothing is broken with how we use it will be necessary.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant