836 matches found
EulerOS Virtualization 2.13.0 : python-urllib3 (EulerOS-SA-2025-2598)
According to the versions of the python-urllib3 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all...
[SECURITY] Fedora 43 Update: python-urllib3-2.6.1-1.fc43
urllib3 is a powerful, user-friendly HTTP client for Python. urllib3 brings many critical features that are missing from the Python standard libraries: =E2=80=A2 Thread safety. =E2=80=A2 Connection pooling. =E2=80=A2 Client-side SSL/TLS verification. =E2=80=A2 File uploads with multipart encoding...
Ubuntu: Security Advisory (USN-7927-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 43 : brotli / perl-Alien-Brotli / python-urllib3 (2025-d93200cf16)
The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-d93200cf16 advisory. Update brotli to 1.2.0 and python-urllib3 to 2.6.1. In python-urllib3: - Fixed a security issue where streaming API could improperly handle highly...
GHSA-2XPW-W6GG-JR37 vulnerabilities
Vulnerabilities for packages: graalvm, py3.13-scanner-test-libraries, airflow, mlflow, openstack-kolla-toolbox-2025.1, open-webui, pgadmin4, openstack-kolla-toolbox-2025.2-fips, py3-hashin, tritonserver-backend-vllm-cuda-12.9, superset, spamcheck, kubeflow-katib, barman, py3-pip, request-1276,...
CVE-2025-66418 vulnerabilities
Vulnerabilities for packages: graalvm, py3.13-scanner-test-libraries, airflow, mlflow, openstack-kolla-toolbox-2025.1, open-webui, pgadmin4, openstack-kolla-toolbox-2025.2-fips, py3-hashin, tritonserver-backend-vllm-cuda-12.9, superset, spamcheck, kubeflow-katib, barman, py3-pip, request-1276,...
GHSA-GM62-XV2J-4W53 vulnerabilities
Vulnerabilities for packages: graalvm, py3.13-scanner-test-libraries, airflow, mlflow, openstack-kolla-toolbox-2025.1, open-webui, pgadmin4, openstack-kolla-toolbox-2025.2-fips, py3-hashin, tritonserver-backend-vllm-cuda-12.9, superset, spamcheck, kubeflow-katib, barman, py3-pip, request-1276,...
CVE-2025-66471 vulnerabilities
Vulnerabilities for packages: graalvm, py3.13-scanner-test-libraries, airflow, mlflow, openstack-kolla-toolbox-2025.1, open-webui, pgadmin4, openstack-kolla-toolbox-2025.2-fips, py3-hashin, tritonserver-backend-vllm-cuda-12.9, superset, spamcheck, kubeflow-katib, barman, py3-pip, request-1276,...
GHSA-2XPW-W6GG-JR37 vulnerabilities
Vulnerabilities for packages: dask-kubernetes, kserve, confluent-docker-utils, py3-pipenv, pypy-3.10, superset, k8s-sidecar, kubeflow-pipelines-visualization-server, py3-urllib3, pypy-3.11, py3-pip, kubeflow-pipelines, open-webui, kubeflow-volumes-web-app, jupyter-base-notebook, kubeflow-katib,...
CVE-2025-66418 vulnerabilities
Vulnerabilities for packages: dask-kubernetes, kserve, confluent-docker-utils, py3-pipenv, pypy-3.10, superset, k8s-sidecar, kubeflow-pipelines-visualization-server, py3-urllib3, pypy-3.11, py3-pip, kubeflow-pipelines, open-webui, kubeflow-volumes-web-app, jupyter-base-notebook, kubeflow-katib,...
AZL-71837 CVE-2025-66471 affecting package python-urllib3 for versions less than 2.0.7-3
urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than...
0lever-utils (>=0.0.2 <=0.0.7), 0xdegenmo-lighter-mcp (=0.1.1) +16246 more potentially affected by CVE-2025-66471 via urllib3 (>=1.10.2 <=2.5.0)
urllib3 PYPI version =1.10.2, =0.0.2, =0.3.0, =0.0.1a0, =1.1.2, =0.1.0, =0.1.0, =0.0.2, =0.0.5, =0.0.7 - a-mailx =0.1.0 - a-texam =1.1.0 - a16z =0.0.1 and more Source cves: CVE-2025-66471 Source advisory: SNYK:PYTHON-URLLIB3-14192442...
AZL-71834 CVE-2025-66418 affecting package python-urllib3 for versions less than 2.0.7-3
urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory...
AZL-71846 CVE-2025-66418 affecting package python-urllib3 for versions less than 1.26.19-3
urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory...
Security Bulletin: IBM watsonx Orchestrate Developer Edition is vulnerable to Open Redirect / Server-Side Request Forgery (SSRF) bypass due to Python
Summary Python is used by IBM watsonx Orchestrate Developer Edition as part of image: tools-runtime-manager Vulnerability Details CVEID:CVE-2025-50182 DESCRIPTION: urllib3 is a user-friendly HTTP client library for Python. Starting in version 2.2.0 and prior to 2.5.0, urllib3 does not control...
Moderate Photon OS Security Update - PHSA-2025-4.0-0912
Updates of 'python3-urllib3' packages of Photon OS have been released...
Moderate Photon OS Security Update - PHSA-2025-5.0-0688
Updates of 'python3-urllib3', 'python3-pip' packages of Photon OS have been released...
Mageia: Security Advisory (MGASA-2025-0281)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Siemens SIMATIC S7-1500 Improper Certificate Validation (CVE-2021-28363)
The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy if an SSLContext isn't given via proxyconfig doesn't verify the hostname of the certificate. This means certificates for...
