cve-replay

CVE Replay: the redirect header boundary CVE-2026-44431 · urllib3 2.6.3 → 2.7.0 · reproduced 27 September 2026 A request carries three sensitive headers to one origin. A redirect changes the destination. Does the next request still carry them? This independent regression runs the real redirect...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by an information disclosure vulnerability in urllib3 (CVE-2026-44431)

Summary An information disclosure vulnerability in the urllib3 HTTP client library CVE-2026-44431 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 2.7.0. Vulnerability Details CVEID:CVE-2026-44431 DESCRIPTION: urllib3 is an HTTP client library f...

CVE-2026-44431: Exposure of Sensitive Information to an Unauthorized Actor

urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connectionfromurl.urlopen..., assertsamehost=False still forward these sensitive headers. This vulnerability is fixed in 2.7.0...