[BUG] Need to support version urllib3 without vulnerability

[afandusibmcom]

Description
detect-secrets 0.13.1+ibm.62.dss depends on urllib3<2.0.0 which has vulnerabilities:

Vulnerability	Severity	CVSS Score	Vulnerable Library	Suggested Fix	Issue
CVE-2025-50182	Medium	5.3	urllib3-1.26.20-py2.py3-none-any.whl	Upgrade to version: https://github.com/urllib3/urllib3.git - 2.5.0	None
CVE-2025-50181	Medium	5.3	urllib3-1.26.20-py2.py3-none-any.whl	Upgrade to version: https://github.com/urllib3/urllib3.git - 2.5.0	None

Impact
This makes my code using this module is non-compliant

[ocofaigh]

+1 on this - it fails vulnerability scan:

	Vulnerability found: GHSA-pq67-6m6q-mj2v - CLAIR-PYPI-URLLIB3-1671223494
		URL: https://nvd.nist.gov/vuln/detail/CVE-2025-50181
		Package: urllib3
		Version: 1.26.20
		Severity: medium
		Description: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
		Remediation: 2.5.0
		Updated at: 2025-06-18T17:50:00Z
		Codes: [CVE-2025-50181]

[HT43-bqxFqB]

This tool was recommended by IBM for internal repository maintenance and clearance. The CVE was published on

Published: 2026-01-07 22:09

When will this be updated?