[ Vendor · 3 CVEs ]
urllib3
CVEs affecting urllib3 published in the last 30 days, plus any urllib3 CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-97687 | 29 Sep 2026 | CVSS 8.1 | urllib3: HTTPS proxy TLS configuration may be ignored or overriddenurllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxy_ssl_context, proxy_assert_hostname, proxy_assert_fingerprint… | Fix |
| CVE-2026-97688 | 29 Sep 2026 | CVSS 5.3 | urllib3: Chunked Deflate streaming can enter an infinite loopurllib3 is an HTTP client library for Python. From 2.6.2 until 2.8.0, HTTPResponse.stream and HTTPResponse.read_chunked can enter an infinite loop… | Fix |
| CVE-2026-97689 | 29 Sep 2026 | CVSS 7.5 | urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memoryurllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate… | Fix |