[Snyk] Security upgrade urllib3 from 1.25.11 to 1.26.5 (#3614)

* fix: cvat/requirements/base.txt to reduce vulnerabilities


The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-1533435

* Update requests package

Co-authored-by: Nikita Manovich <nikita.manovich@intel.com>
main
Snyk bot 5 years ago committed by GitHub
parent d80d241f5a
commit 0981dc3638
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

@ -14,7 +14,7 @@ pyunpack==0.2.1
rcssmin==1.0.6
redis==3.5.3
rjsmin==1.1.0
requests==2.24.0
requests==2.26.0
rq==1.5.1
rq-scheduler==0.10.0
sqlparse==0.3.1
@ -54,3 +54,4 @@ google-cloud-storage==1.42.0
# of pycocotools and tensorflow 2.4.1
# when pycocotools is installed by wheel in python 3.8+
datumaro==0.1.10.1 --no-binary=datumaro --no-binary=pycocotools
urllib3>=1.26.5 # not directly required, pinned by Snyk to avoid a vulnerability

Loading…
Cancel
Save