CVE-2020-7212

🗓️ 06 Mar 2020 19:14:54Reported by mitreType

The _encode_invalid_chars function in util/url.py in urllib3 library 1.25.2 through 1.25.7 for Python allows denial of service due to an inefficient algorithm

Reporter	Title	Published	Views	Family All 24
IBM Security Bulletins	Security Bulletin: Vulnerability in Python-urllib3 affects IBM Cloud Pak for Data System 2.0 (CPDS2.0)	11 Mar 202413:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	15 Apr 202503:04	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in urllib3 affects IBM Cloud Pak for Data System 1.0(CPDS 1.0)[CVE-2020-26137, CVE-2020-7212, CVE-2021-33503]	3 May 202507:17	–	ibm
BDU FSTEC	The vulnerability of the urllib3 module in the Python programming language, related to uncontrolled resource consumption, allows attackers to trigger a service failure.	18 Dec 202000:00	–	bdu_fstec
CNVD	urllib3 library denial of service vulnerability	10 Mar 202000:00	–	cnvd
Cvelist	CVE-2020-7212	6 Mar 202019:14	–	cvelist
Debian CVE	CVE-2020-7212	6 Mar 202019:14	–	debiancve
EUVD	EUVD-2020-0231	7 Oct 202500:30	–	euvd
Github Security Blog	Uncontrolled Resource Consumption in urllib3	30 Apr 202117:31	–	github
NVD	CVE-2020-7212	6 Mar 202020:15	–	nvd

NVD

Node

python urllib3Range1.25.2–1.25.7

Source	Link
github	www.github.com/urllib3/urllib3/commit/a74c9cfbaed9f811e7563cfc3dce894928e0221a
pypi	www.pypi.org/project/urllib3/1.25.8/
github	www.github.com/urllib3/urllib3/blob/master/CHANGES.rst

17 Jun 2026 03:24Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.5

CVSS 27.8

EPSS0.03288

CWE-400