[Snyk] Security upgrade urllib3 from 2.0.7 to 2.6.3 #314
Conversation
The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14896210
There was a problem hiding this comment.
Pull request overview
This PR addresses a security vulnerability (SNYK-PYTHON-URLLIB3-14896210) by upgrading the urllib3 dependency from version 2.0.7 to 2.6.3. The change explicitly pins urllib3 as a dependency in the requirements file, even though it's not directly imported in the code but rather is a transitive dependency through the requests library.
Changes:
- Added explicit urllib3>=2.6.3 constraint to requirements.txt to address security vulnerability
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| @@ -1,2 +1,3 @@ | |||
| requests | |||
| Jinja2 | |||
| urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability | |||
There was a problem hiding this comment.
The version constraint uses a minimum version (>=2.6.3) rather than a more restrictive constraint. This could potentially allow future versions of urllib3 that might introduce breaking changes. Consider using a more restrictive constraint like urllib3>=2.6.3,<3.0.0 to avoid potential compatibility issues with requests while still allowing patch and minor version updates within the 2.x series.
| urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability | |
| urllib3>=2.6.3,<3.0.0 # not directly required, pinned by Snyk to avoid a vulnerability |
2 participants
Snyk has created this PR to fix 1 vulnerabilities in the pip dependencies of this project.
Snyk changed the following file(s):
zabbix_api/requirements.txtImportant
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.