Vulnerability in urrlib3

[okarahan]

Hi,

in our github enterprise we get an alert that there is some vulnerability in the library urllib3. However I could not find the dependency in this library. The command pipenv graph gives me this output:

stups-tokens==1.1.19

• requests [required: Any, installed: 2.21.0]
  • certifi [required: >=2017.4.17, installed: 2018.11.29]
  • chardet [required: >=3.0.2,<3.1.0, installed: 3.0.4]
  • idna [required: >=2.5,<2.9, installed: 2.8]
  • urllib3 [required: >=1.21.1,<1.25, installed: 1.24.1

And the version of urrlib is not safe: https://nvd.nist.gov/vuln/detail/CVE-2019-11324