diff --git a/CHANGELOG.md b/CHANGELOG.md
index 97602e25..e6c08843 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 ### Fixed
 - Fixed SigV4 Signing for Managed Service ([#279](https://github.com/opensearch-project/opensearch-py/pull/279))
 - Fixed SigV4 Signing for Async Requests with QueryStrings ([#272](https://github.com/opensearch-project/opensearch-py/pull/279))
+- Fixed CVE - issue 86 mentioned in opensearch-dsl-py repo ([#295](https://github.com/opensearch-project/opensearch-py/pull/295))
 ### Security
 
 ## [2.1.0]
diff --git a/setup.py b/setup.py
index e504bcf8..236e1271 100644
--- a/setup.py
+++ b/setup.py
@@ -51,7 +51,6 @@ packages = [
 ]
 install_requires = [
     "urllib3>=1.21.1, <2",
-    "certifi",
     "requests>=2.4.0, <3.0.0",
     "six",
     "python-dateutil",
@@ -70,6 +69,8 @@ tests_require = [
 ]
 if sys.version_info >= (3, 6):
     tests_require.append("pytest-mock<4.0.0")
+    install_requires.append("certifi>=2022.12.07")
+
 async_require = ["aiohttp>=3,<4"]
 
 docs_require = ["sphinx", "sphinx_rtd_theme", "myst_parser", "sphinx_copybutton"]