diff --git a/requirements/edx-sandbox/py35.txt b/requirements/edx-sandbox/py35.txt
index 282c035105e33ce575061dd2aa51edaf6b3f57c9..19262d081b6dc8603414e29cd030c92c82a38ee7 100644
--- a/requirements/edx-sandbox/py35.txt
+++ b/requirements/edx-sandbox/py35.txt
@@ -27,7 +27,7 @@ pyparsing==2.2.0          # via -r requirements/edx-sandbox/py35.in, chem, matpl
 python-dateutil==2.4.0    # via -c requirements/edx-sandbox/../constraints.txt, matplotlib
 pytz==2020.4              # via matplotlib
 random2==1.0.1            # via -r requirements/edx-sandbox/py35.in
-regex==2020.11.11         # via -r requirements/edx-sandbox/shared.txt, nltk
+regex==2020.11.13         # via -r requirements/edx-sandbox/shared.txt, nltk
 scipy==1.2.1              # via -c requirements/edx-sandbox/../constraints.txt, -r requirements/edx-sandbox/py35.in, chem, openedx-calc
 six==1.15.0               # via -r requirements/edx-sandbox/shared.txt, chem, cryptography, cycler, matplotlib, openedx-calc, python-dateutil
 sympy==1.4                # via -r requirements/edx-sandbox/py35.in, symmath
diff --git a/requirements/edx-sandbox/shared.txt b/requirements/edx-sandbox/shared.txt
index e44fc6f7413c1b127aa75e8ad366867da010b377..8a8cccb6341bf47be4d6606c6ddedf60f295e065 100644
--- a/requirements/edx-sandbox/shared.txt
+++ b/requirements/edx-sandbox/shared.txt
@@ -11,6 +11,6 @@ joblib==0.14.1            # via -c requirements/edx-sandbox/../constraints.txt,
 lxml==4.5.0               # via -c requirements/edx-sandbox/../constraints.txt, -r requirements/edx-sandbox/shared.in
 nltk==3.5                 # via -r requirements/edx-sandbox/shared.in
 pycparser==2.20           # via cffi
-regex==2020.11.11         # via nltk
+regex==2020.11.13         # via nltk
 six==1.15.0               # via cryptography
 tqdm==4.51.0              # via nltk
diff --git a/requirements/edx/base.txt b/requirements/edx/base.txt
index 45d144b02fcf86840975c6a686d4ed96547650fb..721bbe466f0ad37472091bfc6ef4adf9642facd0 100644
--- a/requirements/edx/base.txt
+++ b/requirements/edx/base.txt
@@ -23,7 +23,7 @@ analytics-python==1.2.9   # via -r requirements/edx/base.in
 aniso8601==8.0.0          # via edx-tincan-py35
 appdirs==1.4.4            # via fs
 attrs==20.3.0             # via -r requirements/edx/base.in, edx-ace
-babel==2.8.1              # via -r requirements/edx/base.in, enmerkar, enmerkar-underscore
+babel==2.9.0              # via -r requirements/edx/base.in, enmerkar, enmerkar-underscore
 beautifulsoup4==4.9.3     # via pynliner
 billiard==3.6.3.0         # via celery
 bleach==3.2.1             # via -r requirements/edx/base.in, django-wiki, edx-enterprise, lti-consumer-xblock, ora2, xblock-poll
@@ -164,7 +164,7 @@ nodeenv==1.5.0            # via -r requirements/edx/base.in
 numpy==1.18.5             # via -c requirements/edx/../constraints.txt, chem, openedx-calc, scipy
 oauthlib==3.0.1           # via -c requirements/edx/../constraints.txt, -r requirements/edx/base.in, django-oauth-toolkit, lti-consumer-xblock, requests-oauthlib, social-auth-core
 openedx-calc==1.0.9       # via -r requirements/edx/base.in
-ora2==2.11.5              # via -r requirements/edx/base.in
+ora2==2.11.6              # via -r requirements/edx/base.in
 packaging==20.4           # via bleach, drf-yasg
 path.py==12.5.0           # via edx-enterprise, edx-i18n-tools, ora2, staff-graded-xblock, xmodule
 path==13.1.0              # via -c requirements/edx/../constraints.txt, -r requirements/edx/paver.txt, path.py
@@ -200,7 +200,7 @@ pyyaml==5.3.1             # via -r requirements/edx/base.in, code-annotations, e
 random2==1.0.1            # via -r requirements/edx/base.in
 recommender-xblock==1.4.9  # via -r requirements/edx/base.in
 redis==3.5.3              # via -r requirements/edx/base.in
-regex==2020.11.11         # via -r requirements/edx/../edx-sandbox/shared.txt, nltk
+regex==2020.11.13         # via -r requirements/edx/../edx-sandbox/shared.txt, nltk
 requests-oauthlib==1.3.0  # via -r requirements/edx/base.in, social-auth-core
 requests==2.25.0          # via -r requirements/edx/paver.txt, analytics-python, coreapi, django-oauth-toolkit, edx-analytics-data-api-client, edx-bulk-grades, edx-drf-extensions, edx-enterprise, edx-rest-api-client, geoip2, mailsnake, pyjwkest, python-swiftclient, requests-oauthlib, sailthru-client, slumber, social-auth-core, tableauserverclient
 rest-condition==1.0.3     # via -r requirements/edx/base.in, edx-drf-extensions
@@ -232,7 +232,7 @@ tqdm==4.51.0              # via -r requirements/edx/../edx-sandbox/shared.txt, n
 ua-parser==0.10.0         # via django-cookies-samesite
 unicodecsv==0.14.1        # via -r requirements/edx/base.in, edx-enterprise
 uritemplate==3.0.1        # via coreapi, drf-yasg
-urllib3==1.26.1           # via -r requirements/edx/paver.txt, elasticsearch, geoip2, requests
+urllib3==1.26.2           # via -r requirements/edx/paver.txt, elasticsearch, geoip2, requests
 user-util==0.3.1          # via -r requirements/edx/base.in
 vine==1.3.0               # via amqp, celery
 voluptuous==0.12.0        # via ora2
diff --git a/requirements/edx/development.txt b/requirements/edx/development.txt
index 7e256d571b0f9b0f3a290eb95c1f653b1ea16ee6..332b46af67ce88a420aab25bac3b628abd533ade 100644
--- a/requirements/edx/development.txt
+++ b/requirements/edx/development.txt
@@ -26,7 +26,7 @@ apipkg==1.5               # via -r requirements/edx/testing.txt, execnet
 appdirs==1.4.4            # via -r requirements/edx/testing.txt, fs, virtualenv
 astroid==2.3.3            # via -r requirements/edx/testing.txt, pylint, pylint-celery
 attrs==20.3.0             # via -r requirements/edx/testing.txt, edx-ace, jsonschema, pytest
-babel==2.8.1              # via -r requirements/edx/testing.txt, enmerkar, enmerkar-underscore, sphinx
+babel==2.9.0              # via -r requirements/edx/testing.txt, enmerkar, enmerkar-underscore, sphinx
 beautifulsoup4==4.9.3     # via -r requirements/edx/testing.txt, pynliner
 billiard==3.6.3.0         # via -r requirements/edx/testing.txt, celery
 bleach==3.2.1             # via -r requirements/edx/testing.txt, django-wiki, edx-enterprise, lti-consumer-xblock, ora2, xblock-poll
@@ -196,7 +196,7 @@ nodeenv==1.5.0            # via -r requirements/edx/testing.txt
 numpy==1.18.5             # via -c requirements/edx/../constraints.txt, -r requirements/edx/testing.txt, chem, openedx-calc, scipy
 oauthlib==3.0.1           # via -c requirements/edx/../constraints.txt, -r requirements/edx/testing.txt, django-oauth-toolkit, lti-consumer-xblock, requests-oauthlib, social-auth-core
 openedx-calc==1.0.9       # via -r requirements/edx/testing.txt
-ora2==2.11.5              # via -r requirements/edx/testing.txt
+ora2==2.11.6              # via -r requirements/edx/testing.txt
 packaging==20.4           # via -r requirements/edx/testing.txt, bleach, drf-yasg, pytest, sphinx, tox
 path.py==12.5.0           # via -r requirements/edx/testing.txt, edx-enterprise, edx-i18n-tools, ora2, staff-graded-xblock, xmodule
 path==13.1.0              # via -c requirements/edx/../constraints.txt, -r requirements/edx/testing.txt, path.py
@@ -253,7 +253,7 @@ pyyaml==5.3.1             # via -r requirements/edx/testing.txt, code-annotation
 random2==1.0.1            # via -r requirements/edx/testing.txt
 recommender-xblock==1.4.9  # via -r requirements/edx/testing.txt
 redis==3.5.3              # via -r requirements/edx/testing.txt
-regex==2020.11.11         # via -r requirements/edx/testing.txt, nltk
+regex==2020.11.13         # via -r requirements/edx/testing.txt, nltk
 requests-oauthlib==1.3.0  # via -r requirements/edx/testing.txt, social-auth-core
 requests==2.25.0          # via -r requirements/edx/testing.txt, analytics-python, coreapi, django-oauth-toolkit, edx-analytics-data-api-client, edx-bulk-grades, edx-drf-extensions, edx-enterprise, edx-rest-api-client, geoip2, mailsnake, pyjwkest, python-swiftclient, requests-oauthlib, sailthru-client, slumber, social-auth-core, sphinx, tableauserverclient, transifex-client
 rest-condition==1.0.3     # via -r requirements/edx/testing.txt, edx-drf-extensions
@@ -277,7 +277,7 @@ social-auth-core==3.3.3   # via -r requirements/edx/testing.txt, social-auth-app
 sorl-thumbnail==12.6.3    # via -r requirements/edx/testing.txt, django-wiki
 sortedcontainers==2.3.0   # via -r requirements/edx/testing.txt
 soupsieve==2.0.1          # via -r requirements/edx/testing.txt, beautifulsoup4
-sphinx==3.3.0             # via edx-sphinx-theme, sphinxcontrib-httpdomain
+sphinx==3.3.1             # via edx-sphinx-theme, sphinxcontrib-httpdomain
 sphinxcontrib-applehelp==1.0.2  # via sphinx
 sphinxcontrib-devhelp==1.0.2  # via sphinx
 sphinxcontrib-htmlhelp==1.0.3  # via sphinx
@@ -304,7 +304,7 @@ ua-parser==0.10.0         # via -r requirements/edx/testing.txt, django-cookies-
 unicodecsv==0.14.1        # via -r requirements/edx/testing.txt, edx-enterprise
 unidiff==0.6.0            # via -r requirements/edx/testing.txt, coverage-pytest-plugin
 uritemplate==3.0.1        # via -r requirements/edx/testing.txt, coreapi, drf-yasg
-urllib3==1.26.1           # via -r requirements/edx/testing.txt, elasticsearch, geoip2, requests, selenium, transifex-client
+urllib3==1.26.2           # via -r requirements/edx/testing.txt, elasticsearch, geoip2, requests, selenium, transifex-client
 user-util==0.3.1          # via -r requirements/edx/testing.txt
 vine==1.3.0               # via -r requirements/edx/testing.txt, amqp, celery
 virtualenv==20.1.0        # via -r requirements/edx/testing.txt, tox
diff --git a/requirements/edx/doc.txt b/requirements/edx/doc.txt
index 4015d4db9590538742b7146b6887efafe1b62423..510e1cd55e44244c1b62f8dc755062cbabab9769 100644
--- a/requirements/edx/doc.txt
+++ b/requirements/edx/doc.txt
@@ -5,7 +5,7 @@
 #    make upgrade
 #
 alabaster==0.7.12         # via sphinx
-babel==2.8.1              # via sphinx
+babel==2.9.0              # via sphinx
 certifi==2020.11.8        # via requests
 chardet==3.0.4            # via requests
 click==7.1.2              # via code-annotations
@@ -30,7 +30,7 @@ requests==2.25.0          # via sphinx
 six==1.15.0               # via edx-sphinx-theme, packaging, stevedore
 smmap==3.0.4              # via gitdb
 snowballstemmer==2.0.0    # via sphinx
-sphinx==3.3.0             # via -r requirements/edx/doc.in, edx-sphinx-theme
+sphinx==3.3.1             # via -r requirements/edx/doc.in, edx-sphinx-theme
 sphinxcontrib-applehelp==1.0.2  # via sphinx
 sphinxcontrib-devhelp==1.0.2  # via sphinx
 sphinxcontrib-htmlhelp==1.0.3  # via sphinx
@@ -40,7 +40,7 @@ sphinxcontrib-serializinghtml==1.1.4  # via sphinx
 sqlparse==0.4.1           # via django
 stevedore==1.32.0         # via -c requirements/edx/../constraints.txt, code-annotations
 text-unidecode==1.3       # via python-slugify
-urllib3==1.26.1           # via requests
+urllib3==1.26.2           # via requests
 
 # The following packages are considered to be unsafe in a requirements file:
 # setuptools
diff --git a/requirements/edx/paver.txt b/requirements/edx/paver.txt
index cafb2459c886e0a069c486fb60ddcc6ab344aff3..a78460e62cc5c2ce68f707038edc9a48e7f0639a 100644
--- a/requirements/edx/paver.txt
+++ b/requirements/edx/paver.txt
@@ -24,7 +24,7 @@ python-memcached==1.59    # via -r requirements/edx/paver.in
 requests==2.25.0          # via -r requirements/edx/paver.in
 six==1.15.0               # via edx-opaque-keys, libsass, mock, paver, python-memcached, stevedore
 stevedore==1.32.0         # via -c requirements/edx/../constraints.txt, -r requirements/edx/paver.in, edx-opaque-keys
-urllib3==1.26.1           # via requests
+urllib3==1.26.2           # via requests
 watchdog==0.10.3          # via -r requirements/edx/paver.in
 wrapt==1.11.2             # via -c requirements/edx/../constraints.txt, -r requirements/edx/paver.in
 zipp==1.0.0               # via -c requirements/edx/../constraints.txt, importlib-metadata
diff --git a/requirements/edx/testing.txt b/requirements/edx/testing.txt
index 7014bd549ed2a40acf7cafa466770be39b17e364..6e199e0e622f6721b8011f4a40a04209e6ad1a1d 100644
--- a/requirements/edx/testing.txt
+++ b/requirements/edx/testing.txt
@@ -25,7 +25,7 @@ apipkg==1.5               # via execnet
 appdirs==1.4.4            # via -r requirements/edx/base.txt, fs, virtualenv
 astroid==2.3.3            # via pylint, pylint-celery
 attrs==20.3.0             # via -r requirements/edx/base.txt, edx-ace, pytest
-babel==2.8.1              # via -r requirements/edx/base.txt, enmerkar, enmerkar-underscore
+babel==2.9.0              # via -r requirements/edx/base.txt, enmerkar, enmerkar-underscore
 beautifulsoup4==4.9.3     # via -r requirements/edx/base.txt, -r requirements/edx/testing.in, pynliner
 billiard==3.6.3.0         # via -r requirements/edx/base.txt, celery
 bleach==3.2.1             # via -r requirements/edx/base.txt, django-wiki, edx-enterprise, lti-consumer-xblock, ora2, xblock-poll
@@ -188,7 +188,7 @@ nodeenv==1.5.0            # via -r requirements/edx/base.txt
 numpy==1.18.5             # via -c requirements/edx/../constraints.txt, -r requirements/edx/base.txt, chem, openedx-calc, scipy
 oauthlib==3.0.1           # via -c requirements/edx/../constraints.txt, -r requirements/edx/base.txt, django-oauth-toolkit, lti-consumer-xblock, requests-oauthlib, social-auth-core
 openedx-calc==1.0.9       # via -r requirements/edx/base.txt
-ora2==2.11.5              # via -r requirements/edx/base.txt
+ora2==2.11.6              # via -r requirements/edx/base.txt
 packaging==20.4           # via -r requirements/edx/base.txt, bleach, drf-yasg, pytest, tox
 path.py==12.5.0           # via -r requirements/edx/base.txt, edx-enterprise, edx-i18n-tools, ora2, staff-graded-xblock, xmodule
 path==13.1.0              # via -c requirements/edx/../constraints.txt, -r requirements/edx/base.txt, path.py
@@ -242,7 +242,7 @@ pyyaml==5.3.1             # via -r requirements/edx/base.txt, code-annotations,
 random2==1.0.1            # via -r requirements/edx/base.txt
 recommender-xblock==1.4.9  # via -r requirements/edx/base.txt
 redis==3.5.3              # via -r requirements/edx/base.txt
-regex==2020.11.11         # via -r requirements/edx/base.txt, nltk
+regex==2020.11.13         # via -r requirements/edx/base.txt, nltk
 requests-oauthlib==1.3.0  # via -r requirements/edx/base.txt, social-auth-core
 requests==2.25.0          # via -r requirements/edx/base.txt, analytics-python, coreapi, django-oauth-toolkit, edx-analytics-data-api-client, edx-bulk-grades, edx-drf-extensions, edx-enterprise, edx-rest-api-client, geoip2, mailsnake, pyjwkest, python-swiftclient, requests-oauthlib, sailthru-client, slumber, social-auth-core, tableauserverclient, transifex-client
 rest-condition==1.0.3     # via -r requirements/edx/base.txt, edx-drf-extensions
@@ -283,7 +283,7 @@ ua-parser==0.10.0         # via -r requirements/edx/base.txt, django-cookies-sam
 unicodecsv==0.14.1        # via -r requirements/edx/base.txt, edx-enterprise
 unidiff==0.6.0            # via -r requirements/edx/testing.in, coverage-pytest-plugin
 uritemplate==3.0.1        # via -r requirements/edx/base.txt, coreapi, drf-yasg
-urllib3==1.26.1           # via -r requirements/edx/base.txt, elasticsearch, geoip2, requests, selenium, transifex-client
+urllib3==1.26.2           # via -r requirements/edx/base.txt, elasticsearch, geoip2, requests, selenium, transifex-client
 user-util==0.3.1          # via -r requirements/edx/base.txt
 vine==1.3.0               # via -r requirements/edx/base.txt, amqp, celery
 virtualenv==20.1.0        # via tox
diff --git a/scripts/xblock/requirements.txt b/scripts/xblock/requirements.txt
index 3405eea0ca16ce059a987c632845ed071beaab81..29b5d5ba5c3522ad0dbff174352efac206d7d59f 100644
--- a/scripts/xblock/requirements.txt
+++ b/scripts/xblock/requirements.txt
@@ -8,4 +8,4 @@ certifi==2020.11.8        # via requests
 chardet==3.0.4            # via requests
 idna==2.10                # via requests
 requests==2.25.0          # via -r scripts/xblock/requirements.in
-urllib3==1.26.1           # via requests
+urllib3==1.26.2           # via requests