Lucene search
K

7 matches found

OSV
OSV
added 2026/05/13 4:16 p.m.5 views

UBUNTU-CVE-2026-44432

urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion 1 during the second HTTPResponse.readamt=N call when the response was decompressed using the official Brotli library or 2 when...

8.9CVSS5.8AI score0.00388EPSS
Exploits0References4
OSV
OSV
added 2025/12/05 5:16 p.m.6 views

UBUNTU-CVE-2025-66471

urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than...

8.9CVSS6.9AI score0.00622EPSS
Exploits0References10
AlpineLinux
AlpineLinux
added 2025/12/05 4:6 p.m.5 views

CVE-2025-66471

urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than...

8.9CVSS7.4AI score0.00622EPSS
Exploits0References2
Snyk
Snyk
added 2023/01/10 10:43 p.m.1 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS by sending an invalid request to an exposed endpoint. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike other...

7.5CVSS7AI score0.0274EPSS
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2021/07/30 12:0 a.m.4 views

jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file.

...

5CVSS7AI score0.04276EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2021/05/03 12:0 a.m.6 views

PT-2021-7372 · Python +10 · Python +10

Name of the Vulnerable Software and Affected Versions: Python affected versions not specified Description: A flaw in the HTTP client code of Python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat...

10CVSS6.5AI score0.73327EPSS
Exploits80References470
OSV
OSV
added 2017/08/31 3:29 p.m.3 views

UBUNTU-CVE-2017-14055

In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mvreadheader due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nbframes" field in the header but does not contain sufficient backing data, is provided, the loop over t...

6.5CVSS6.9AI score0.01822EPSS
Exploits0References2
Rows per page
Query Builder