From 98007be1c2cc1467b26d79c03225b5452e368bc2 Mon Sep 17 00:00:00 2001
From: Adam <103067949+AdamL-Microsoft@users.noreply.github.com>
Date: Tue, 30 May 2023 17:45:38 -0700
Subject: [PATCH] Update requests version in CLI requirements to fix CVE
 (#3145)

* updated requests version in CLI requirements to fix CVE
---
 src/cli/requirements.txt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/cli/requirements.txt b/src/cli/requirements.txt
index 3da6075c8..bdb622228 100644
--- a/src/cli/requirements.txt
+++ b/src/cli/requirements.txt
@@ -1,5 +1,6 @@
 msal==1.20.0
-requests~=2.27.1
+# install requests >=2.31.0 to fix CVE-2023-32681
+requests>=2.31.0
 jmespath~=0.10.0
 semver~=2.13.0
 signalrcore==0.9.2