The current pinned version requests==2.32.3 is vulnerable to CVE-2026-25645.
While this library's standard usage is not directly affected, users who integrate this package with other dependencies that call requests.utils.extract_zipped_paths() could be exposed to this vulnerability.
Additionally, updating to >=2.33.0 will eliminate security warnings when users scan their dependencies.
Recommendation:
Update requirements.txt to use requests==2.33.0 instead of requests==2.32.3.
The current pinned version
requests==2.32.3is vulnerable to CVE-2026-25645.While this library's standard usage is not directly affected, users who integrate this package with other dependencies that call
requests.utils.extract_zipped_paths()could be exposed to this vulnerability.Additionally, updating to >=2.33.0 will eliminate security warnings when users scan their dependencies.
Recommendation:
Update
requirements.txtto userequests==2.33.0instead ofrequests==2.32.3.