Urllib3

Urllib3

12 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
  • EPSS 0.24%
  • Veröffentlicht 29.09.2026 16:17:18
  • Zuletzt bearbeitet 30.09.2026 21:17:19

urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxy_ssl_context, proxy_assert_hostname, proxy_assert_fingerprint, ssl_context, cert_reqs, verify_mode, use_forwarding_for_https=True, and CERT_NONE configuration paths fail ...

  • EPSS 0.29%
  • Veröffentlicht 29.09.2026 16:17:18
  • Zuletzt bearbeitet 30.09.2026 19:38:27

urllib3 is an HTTP client library for Python. From 2.6.2 until 2.8.0, HTTPResponse.stream and HTTPResponse.read_chunked can enter an infinite loop because the Deflate decoder retains trailing bytes as unconsumed input after reaching end-of-stream and...

  • EPSS 0.29%
  • Veröffentlicht 29.09.2026 16:17:18
  • Zuletzt bearbeitet 30.09.2026 19:38:27

urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF wi...

  • EPSS 0.3%
  • Veröffentlicht 19.06.2026 18:45:10
  • Zuletzt bearbeitet 13.08.2026 15:20:22

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  • EPSS 0.33%
  • Veröffentlicht 13.05.2026 16:16:57
  • Zuletzt bearbeitet 26.06.2026 12:16:32

urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vu...

  • EPSS 0.68%
  • Veröffentlicht 13.05.2026 16:16:57
  • Zuletzt bearbeitet 10.09.2026 13:20:11

urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion (1) during the second HTTPResponse.read(amt=N) call when the response was decompressed using the of...

  • EPSS 2.71%
  • Veröffentlicht 07.01.2026 22:15:44
  • Zuletzt bearbeitet 15.09.2026 12:16:58

urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perfo...

  • EPSS 0.69%
  • Veröffentlicht 05.12.2025 16:06:08
  • Zuletzt bearbeitet 25.09.2026 23:10:00

urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the efficient handling of large HTTP responses...

  • EPSS 0.69%
  • Veröffentlicht 05.12.2025 16:02:15
  • Zuletzt bearbeitet 25.09.2026 23:10:00

urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression ste...

Medienbericht
  • EPSS 0.35%
  • Veröffentlicht 19.06.2025 01:42:44
  • Zuletzt bearbeitet 22.12.2025 19:15:49

urllib3 is a user-friendly HTTP client library for Python. Starting in version 2.2.0 and prior to 2.5.0, urllib3 does not control redirects in browsers and Node.js. urllib3 supports being used in a Pyodide runtime utilizing the JavaScript Fetch API o...