urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

...

SUSE CVE-2025-38094

In the Linux kernel, the following vulnerability has been resolved: net: cadence: macb: Fix a possible deadlock in macbhalttx. There is a situation where after THALT is set high, TGO stays high as well. Because jiffies are never updated, as we are in a context with interrupts disabled, we never...

DEBIAN-CVE-2025-38094

In the Linux kernel, the following vulnerability has been resolved: net: cadence: macb: Fix a possible deadlock in macbhalttx. There is a situation where after THALT is set high, TGO stays high as well. Because jiffies are never updated, as we are in a context with interrupts disabled, we never...

UBUNTU-CVE-2025-38094

In the Linux kernel, the following vulnerability has been resolved: net: cadence: macb: Fix a possible deadlock in macbhalttx. There is a situation where after THALT is set high, TGO stays high as well. Because jiffies are never updated, as we are in a context with interrupts disabled, we never...

Open Redirect

Overview urllib3 is a HTTP library with thread-safe connection pooling, file post, and more. Affected versions of this package are vulnerable to Open Redirect due to the retries parameter being ignored during PoolManager instantiation. An attacker can access unintended resources or endpoints by...

GHSA-PQ67-6M6Q-MJ2V urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

urllib3 handles redirects and retries using the same mechanism, which is controlled by the Retry object. The most common way to disable redirects is at the request level, as follows: python resp = urllib3.request"GET", "https://httpbin.org/redirect/1", redirect=False printresp.status 302 However,...

PT-2025-27681

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A possible deadlock in the macb halt tx function has been identified. This issue occurs when, after setting THALT high, TGO stays high as well, causing jiffies to never be updated due ...

PT-2025-18134 · Unknown · Libsnowflakeclient

Name of the Vulnerable Software and Affected Versions: libsnowflakeclient versions 0.5.0 through 2.2.0 Description: The issue concerns the Snowflake Connector for C/C++, which incorrectly treats malformed requests that cause the HTTP response status code 400 as able to be retried. This could hang...

Snowbridge 安全漏洞

Snowbridge is an open source application from Snowplow. A security vulnerability exists in Snowbridge that stems from an invalid GTM SS preview header that could lead to infinite event retries...

PT-2025-14805 · Unknown · Snowbridge

Name of the Vulnerable Software and Affected Versions: Snowbridge affected versions not specified Description: The issue involves attaching an invalid GTM SS preview header to events in Snowbridge setups that send data to Google Tag Manager Server Side. This causes the events to be retried...

CVE-2024-47215

An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side. It involves attaching an invalid GTM SS preview header to events, causing them to be retried indefinitely. As a result, the performance of forwarding events to GTM SS overall can be affected latency,...

CVE-2024-47215: Improper Check or Handling of Exceptional Conditions

An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side. It involves attaching an invalid GTM SS preview header to events, causing them to be retried indefinitely. As a result, the performance of forwarding events to GTM SS overall can be affected latency,...

CVE-2024-47215

An issue was discovered in Snowbridge (an open-source application from Snowplow) when sending data to Google Tag Manager Server Side . The vulnerability is caused by the attachment of an invalid GTM SS preview header to events, which triggers indefinite retries . This can negatively impact the pe...

CVE-2025-21832 block: don't revert iter for -EIOCBQUEUED

In the Linux kernel, the following vulnerability has been resolved: block: don't revert iter for -EIOCBQUEUED blkdevreaditer has a few odd checks, like gating the position and count adjustment on whether or not the result is bigger-than-or-equal to zero where bigger than makes more sense, and not...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a denial of service DoS when the CEPH file system builds a path that could lead to an infinite retry loop fo...

PT-2025-49181

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.66 Description The Apache HTTP Server, when configured with Server Side Includes SSI enabled and utilizing mod cgid but not mod cgi, improperly handles shell-escaped query strings passed to exec cmd=".....

CVE-2024-52797 Searching Opencast may cause a denial of service

Opencast is free and open source software for automated video capture and distribution. First noticed in Opencast 13 and 14, Opencast's Elasticsearch integration may generate syntactically invalid Elasticsearch queries in relation to previously acceptable search queries. From Opencast version 11....

Cisco DCNM Auth Bypass

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'securerandom' require 'base64' class MetasploitModule 'Cisco DCNM auth bypass', 'Description' = %q This exploit is able to add an admin account to a Cisco DCNM...

kernel: NFSD: Fix the behavior of READ near OFFSET_MAX

A vulnerability was found in the Linux kernel's NFSD, where improper handling of read requests near the maximum offset can lead to an integer overflow. When a client attempts to read from a near-maximum offset, it causes the server to return an invalid NFS error, resulting in indefinite retries b...

kernel: NFSD: Fix the behavior of READ near OFFSET_MAX

A vulnerability was found in the Linux kernel's NFSD, where improper handling of read requests near the maximum offset can lead to an integer overflow. When a client attempts to read from a near-maximum offset, it causes the server to return an invalid NFS error, resulting in indefinite retries b...