urllib3
HTTP library with thread-safe connection pooling, file post, and more.
Security Advisories for urllib3 in pypi
High
28 days ago
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
pypi
urllib3
High
6 months ago
urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API
pypi
urllib3
High
6 months ago
urllib3: Sensitive headers forwarded across origins in proxied low-level redirects
pypi
urllib3
High
10 months ago
Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)
pypi
urllib3
High
11 months ago
urllib3 allows an unbounded number of links in the decompression chain
pypi
urllib3
Moderate
over 1 year ago
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
pypi
urllib3
Moderate
over 2 years ago
urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects
pypi
urllib3
Moderate
about 3 years ago
urllib3's request body not stripped after redirect from 303 status changes request method to GET
pypi
urllib3
Moderate
over 4 years ago
Improper Neutralization of CRLF Sequences in urllib3 library for Python
pypi
urllib3
High
over 5 years ago
Catastrophic backtracking in URL authority parser when passed URL containing many @ characters
pypi
urllib3
Moderate
over 5 years ago
Using default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connection
pypi
urllib3
Critical
almost 8 years ago
Exposure of Sensitive Information to an Unauthorized Actor in urllib3
pypi
urllib3