Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

pypi

urllib3

pypi · HTTP library with thread-safe connection pooling, file post, and more. · Repository · Package

Security Advisories for urllib3 in pypi

Moderate
4 months ago

urllib3 does not control redirects in browsers and Node.js GSA_kwCzR0hTQS00OHA0LTh4Y2YtdnhqNc4ABJPm

pypi urllib3
Moderate
4 months ago

urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation GSA_kwCzR0hTQS1wcTY3LTZtNnEtbWoyds4ABJPl

pypi urllib3
Moderate
over 1 year ago

urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects GSA_kwCzR0hTQS0zNGpoLXA5N2YtbXB4Zs4AA9I1

pypi urllib3
Moderate
almost 2 years ago

urllib3's request body not stripped after redirect from 303 status changes request method to GET GSA_kwCzR0hTQS1nNG14LXE5dmctMjdwNM4AA2gt

pypi urllib3
Moderate
almost 2 years ago

Authorization Header forwarded on redirect GSA_kwCzR0hTQS1nd3ZtLTQ1Z3gtM2NmOM4AA2c6

pypi urllib3
High
almost 2 years ago

`Cookie` HTTP header isn't stripped on cross-origin redirects GSA_kwCzR0hTQS12ODQ1LWp4eDUtdmM5Zs4AA2MD

pypi urllib3
Moderate
over 3 years ago

Urllib3 Incorrect Certificate Validation GSA_kwCzR0hTQS12NHc1LXAyaGctOGZoNs4AAcGU

pypi urllib3
Moderate
over 3 years ago

Improper Neutralization of CRLF Sequences in urllib3 library for Python GSA_kwCzR0hTQS1yNjRxLXc4anItZzlxcM3wRw

pypi urllib3
Moderate
over 4 years ago

CRLF injection in urllib3 MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdxdnEtNW04Yy02ZzI0

pypi urllib3
High
over 4 years ago

Catastrophic backtracking in URL authority parser when passed URL containing many @ characters MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXEycTctNXBwNC13NnBn

pypi urllib3
High
over 4 years ago

Uncontrolled Resource Consumption in urllib3 MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhtdjItNzlxOC1mdjZn

pypi urllib3
Moderate
over 4 years ago

Using default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connection MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVwaGYtcHA3cC12YzJy

pypi urllib3
High
over 6 years ago

Improper Certificate Validation in urllib3 MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1oMzMtN3JycS02NjJ3

pypi urllib3
Critical
almost 7 years ago

Exposure of Sensitive Information to an Unauthorized Actor in urllib3 MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXd3dzItdjd4ai14cmM2

pypi urllib3

Filter by Severity

Moderate 9 High 4 Critical 1