CVE-2020-26137

Advisory

Draft-kings 2.0.3 updates its dependency 'urllib3' to v1.25.9 due to security issues.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Summary

42 updates the version of the `urllib3` library to `1.25.9` to avoid vulnerabilities associated with version `1.24.3`.

This also meant upgrading the associated `requests` library version because the previous version of `2.20.0` explicitly only allowed `urllib3` < `1.25`.

By upgrading `requests` to `2.22.0`, `urllib31.25.9` was allowed.

Resources

• https://pypi.org/project/draft-kings
• https://pyup.io/changelogs/draft-kings/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26137