diff --git a/requirements/base.in b/requirements/base.in
index 9d527fba593..7df8f05b016 100644
--- a/requirements/base.in
+++ b/requirements/base.in
@@ -16,7 +16,7 @@
 # specific language governing permissions and limitations
 # under the License.
 #
-urllib3==2.5.0
+urllib3>=2.6.0,<3.0.0
 werkzeug>=3.0.1
 numexpr>=2.9.0
 
diff --git a/requirements/base.txt b/requirements/base.txt
index 976180e691b..23483bf3ff2 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -435,7 +435,7 @@ tzdata==2025.2
     #   pandas
 url-normalize==2.2.1
     # via requests-cache
-urllib3==2.5.0
+urllib3==2.6.0
     # via
     #   -r requirements/base.in
     #   requests
diff --git a/requirements/development.txt b/requirements/development.txt
index f2844f60be7..2554cc3fb60 100644
--- a/requirements/development.txt
+++ b/requirements/development.txt
@@ -1003,7 +1003,7 @@ url-normalize==2.2.1
     # via
     #   -c requirements/base-constraint.txt
     #   requests-cache
-urllib3==2.5.0
+urllib3==2.6.0
     # via
     #   -c requirements/base-constraint.txt
     #   docker