Requests has a known vulnerability, that is fixed in versions 2.32.3.
Anyway this project in our requirements is causing an alert, because it still resolve to an older version of requests, as can be seen here:
|
'requests>=2.32.0,<2.32.3', |
requires = [
'jmespath>=0.10.0,<=1.0.1',
'python-dateutil>=2.9.0,<3.0.0',
'requests>=2.32.0,<2.32.3',
'urllib3>=1.26.18,<3',
]
Is possible to fix this issue?