Product by Debian
Python-urllib3
4 known vulnerabilities in Python-urllib3 (Debian), 0 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-21441 | Urllib3: Improper Handling of Highly Compressed Data (Data Amplification) | 7.5 | |
| High | CVE-2025-66418 | urllib3 allows an unbounded number of links in the decompression chain | 7.5 | |
| High | CVE-2026-44431 | urllib3: Sensitive headers forwarded across origins in proxied low-level redirects | 5.3 | |
| Medium | CVE-2025-50181 | urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation | 5.3 |