ALPINE-CVE-2021-28363

The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy if an SSLContext isn't given via proxyconfig doesn't verify the hostname of the certificate. This means certificates for...

urllib3 信任管理问题漏洞

urllib3 is a Python HTTP library. It features thread-safe connection pooling, file publishing support, and more. A trust management issue vulnerability exists in urllib3 library 1.26.x before 1.26.4, which stems from the fact that certificates from other servers that are correctly validated by...