Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-4176
  • PyPI/urllib3
 urllib3: Chunked Deflate streaming can enter an infinite loop 3 days ago
  • Fix available
  • Severity - 6.9 (Medium)
PYSEC-2026-4177
  • PyPI/urllib3
 urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory 3 days ago
  • Fix available
  • Severity - 8.9 (High)
PYSEC-2026-4175
  • PyPI/urllib3
 urllib3: HTTPS proxy TLS configuration may be ignored or overridden 3 days ago
  • Fix available
  • Severity - 7.6 (High)
GHSA-gh4c-6fx4-qh6g
  • PyPI/urllib3
 urllib3: Chunked Deflate streaming can enter an infinite loop 4 days ago
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-vxq7-64xx-v4gw
  • PyPI/urllib3
 urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory 4 days ago
  • Fix available
  • Severity - 8.9 (High)
GHSA-8988-9cw3-xx77
  • PyPI/urllib3
 urllib3: HTTPS proxy TLS configuration may be ignored or overridden 4 days ago
  • Fix available
  • Severity - 7.6 (High)
PYSEC-2026-1996
  • PyPI/urllib3
 Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API) 07 Jul
  • Fix available
  • Severity - 8.9 (High)
PYSEC-2026-1994
  • PyPI/urllib3
 urllib3 streaming API improperly handles highly compressed data 07 Jul
  • Fix available
  • Severity - 8.9 (High)
PYSEC-2026-1998
  • PyPI/urllib3
 urllib3 allows an unbounded number of links in the decompression chain 07 Jul
  • Fix available
  • Severity - 8.9 (High)
PYSEC-2026-1997
  • PyPI/urllib3
 urllib3 does not control redirects in browsers and Node.js 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1999
  • PyPI/urllib3
 urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1995
  • PyPI/urllib3
 urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects 07 Jul
  • Fix available
  • Severity - 4.4 (Medium)
PYSEC-2026-142
  • PyPI/urllib3
 See record for full details 13 May
  • Fix available
  • Severity - 7.5 (High)
PYSEC-2026-141
  • PyPI/urllib3
 See record for full details 13 May
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-mf9v-mfxr-j63j
  • PyPI/urllib3
 urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API 11 May
  • Fix available
  • Severity - 8.9 (High)
GHSA-qccp-gfcp-xxvc
  • PyPI/urllib3
 urllib3: Sensitive headers forwarded across origins in proxied low-level redirects 11 May
  • Fix available
  • Severity - 8.2 (High)
Load more...