Product by Ubuntu

    Python-urllib3

    5 known vulnerabilities in Python-urllib3 (Ubuntu), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Python-urllib3 (Ubuntu)
    HighCVE-2025-66418

    urllib3 allows an unbounded number of links in the decompression chain

    also in 8 other products

    7.5
    HighCVE-2026-97689

    urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory

    also in 4 other products

    7.5
    HighCVE-2026-97687

    urllib3: HTTPS proxy TLS configuration may be ignored or overridden

    also in 4 other products

    8.1
    MediumCVE-2026-97688

    urllib3: Chunked Deflate streaming can enter an infinite loop

    also in 2 other products

    5.3
    HighCVE-2026-44431

    urllib3: Sensitive headers forwarded across origins in proxied low-level redirects

    also in 6 other products

    5.3

    All products by Ubuntu