Root has patched CVE-2020-26137 in the rootio-urllib3 package for Root:PyPI. Multiple fixed versions available.
{ "source": "Root", "distro_version": "", "distro": "pypi" }
2.0
[ "1.23+root.io.8", "1.23+root.io.9" ]
"https://api.root.io/external/osv/ROOT-APP-PYPI-CVE-2020-26137.json"
"root.io.9"
"1.23"
true