From 8b3f74b39b4dfc916c959d41d81b11dd676acce3 Mon Sep 17 00:00:00 2001 From: anti Date: Sat, 16 May 2026 18:26:47 -0400 Subject: [PATCH] fix(deps): pin urllib3>=2.7.0 to resolve CVE-2026-44431 and CVE-2026-44432 --- pyproject.toml | 1 + 1 file changed, 1 insertion(+) diff --git a/pyproject.toml b/pyproject.toml index d510b634..25c3fcb2 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -37,6 +37,7 @@ dependencies = [ "python-multipart>=0.0.20", "httpx>=0.28.1", "requests>=2.33.1", + "urllib3>=2.7.0", "slowapi>=0.1.9", "sqlite_vec>=0.1.9", "Pillow>=12.2.0",