fix CVEs

 - upgrade pip
 - bump urllib3

Related-PRODX: PRODX-36644
Change-Id: Ib3a717cbaefef4f70a115cf9a8b5a6adf4799c59
diff --git a/requirements.txt b/requirements.txt
index cd64fee..b516bbe 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -7,4 +7,4 @@
 prometheus-client==0.11.0
 prometheus-es-exporter==0.14.0
 six==1.16.0
-urllib3==1.26.6
+urllib3>=1.26.6,<2.0.0