PatchFirst · Latest vulnerabilities
Vulnerability published for python-urllib3 in the last 30 days: 1. Listed in the KEV catalogue: 0.
Vulnerabilities: 6
This update for python-urllib3 fixes the following issues: - CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). - CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283910).
This update for python-urllib3 fixes the following issue - CVE-2026-9375: decompression bomb bypass in the streaming API when using Brotli support can lead to a denial of service (bsc#1268683).
This update for python-urllib3 fixes the following issue - CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins in proxied low-level redirects (bsc#1265267).
This update for python-urllib3 fixes the following issues: - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867). - CVE-2025-66418: resource exhaustion via unbounded number of links in the decompression chain (bsc#1254866).
This update for python-urllib3 fixes the following issues: - CVE-2026-21441: Fixed excessive resource consumption during decompression of data in HTTP redirect responses (bsc#1256331)
This update for python-urllib3 fixes the following issues: - CVE-2025-50181: Pool managers now properly control redirects when retries is passed. (bsc#1244925)
Check your installed stack and versions against the current vulnerability feeds.