Fixed CVE - issue 86 mentioned in opensearch-dsl-py repo (#295)

Signed-off-by: saimedhi <saimedhi@amazon.com>
opensearch-project · Feb 16, 2023 · b26e2f3 · b26e2f3
1 parent c58375a
commit b26e2f3
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -9,6 +9,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 ### Fixed
 - Fixed SigV4 Signing for Managed Service ([#279](https://github.com/opensearch-project/opensearch-py/pull/279))
 - Fixed SigV4 Signing for Async Requests with QueryStrings ([#272](https://github.com/opensearch-project/opensearch-py/pull/279))
+- Fixed CVE - issue 86 mentioned in opensearch-dsl-py repo ([#295](https://github.com/opensearch-project/opensearch-py/pull/295))
 ### Security
 
 ## [2.1.0]

diff --git a/setup.py b/setup.py
@@ -51,7 +51,6 @@
 ]
 install_requires = [
     "urllib3>=1.21.1, <2",
-    "certifi",
     "requests>=2.4.0, <3.0.0",
     "six",
     "python-dateutil",
@@ -70,6 +69,8 @@
 ]
 if sys.version_info >= (3, 6):
     tests_require.append("pytest-mock<4.0.0")
+    install_requires.append("certifi>=2022.12.07")
+
 async_require = ["aiohttp>=3,<4"]
 
 docs_require = ["sphinx", "sphinx_rtd_theme", "myst_parser", "sphinx_copybutton"]