From 9a2c14226e590904d59a875e66eae57db9946403 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 8 Dec 2025 10:05:46 +0000
Subject: [PATCH] fix: backend/requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192442
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192443
---
 backend/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/requirements.txt b/backend/requirements.txt
index b3f698c9..393a5fa3 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -40,7 +40,7 @@ starlette==0.27.0
 # sse-starlette==1.4.1 (wrong version cant deploy)
 sse-starlette==2.1.3
 typing-extensions==4.7.1
-urllib3==2.0.4
+urllib3==2.6.0
 uvicorn==0.22.0
 uvloop==0.17.0
 # websocket-client==1.7.2 (wrong version cant deploy)