Update Python dependency - urllib3 from v1.25.8 to v1.25.9

https://www.cve.org/CVERecord?id=CVE-2020-26137 > urllib3 before 1.25.9 allows CRLF injection if the attacker controls > the HTTP request method, as demonstrated by inserting CR and LF > control characters in the first argument of putrequest(). NOTE: this > is similar to CVE-2020-26116.
pi-hole · Jun 30, 2022 · 7d52158 · 7d52158
1 parent 4399f41
commit 7d52158
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 10 deletions.
diff --git a/Pipfile b/Pipfile
@@ -48,7 +48,7 @@ testinfra = "==3.3.0"
 texttable = "==1.6.2"
 toml = "==0.10.0"
 tox = "==3.14.3"
-urllib3 = "==1.25.8"
+urllib3 = "==1.25.9"
 virtualenv = "==16.7.9"
 wcwidth = "==0.1.7"
 zipp = "==0.6.0"

diff --git a/Pipfile.lock b/Pipfile.lock
diff --git a/requirements.txt b/requirements.txt
@@ -47,7 +47,7 @@ testinfra==3.3.0
 texttable==1.6.2
 toml==0.10.0
 tox==3.14.3
-urllib3==1.25.8
+urllib3==1.25.9
 virtualenv==16.7.9
 wcwidth==0.1.7
 websocket-client==0.57.0