From 71ccb5eea83cf840dff42f1fd86989811e276208 Mon Sep 17 00:00:00 2001
From: Stuart Siegel <stus@us.ibm.com>
Date: Wed, 31 Jul 2024 15:51:58 -0400
Subject: [PATCH]  "urllib3>=1.26.19,<2",

---
 pyproject.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pyproject.toml b/pyproject.toml
index 69942659..6d00fff7 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -21,7 +21,7 @@ dependencies = [
     "transformers[torch]>=4.38.0",
     "datasets",
     "deprecated",
-    "urllib3>=2.2.2",
+    "urllib3>=1.26.19,<2",         # see https://github.com/urllib3/urllib3/security/advisories/GHSA-34jh-p97f-mpxf
     "numpy<2",
 ]