I've just been through the process of updating to the 3+ version of the sdk and noticed that it reintroduced a security alert for urllib3. We had version 2.5.0 previously but the newer versions of the sdk only allow up to 2.0.7, so as part of upgrading the sdk downgraded our verison or urllib3.
The latest version installable is 2.0.7 which raises alerts GHSA-pq67-6m6q-mj2v and GHSA-34jh-p97f-mpxf
Would it be possible to upgrade to the newest version of urllib3?
I've just been through the process of updating to the 3+ version of the sdk and noticed that it reintroduced a security alert for
urllib3. We had version2.5.0previously but the newer versions of the sdk only allow up to2.0.7, so as part of upgrading the sdk downgraded our verison orurllib3.The latest version installable is
2.0.7which raises alerts GHSA-pq67-6m6q-mj2v and GHSA-34jh-p97f-mpxfWould it be possible to upgrade to the newest version of
urllib3?