Ubuntu: Security Advisory (USN-7927-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : brotli / perl-Alien-Brotli / python-urllib3 (2025-d93200cf16)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-d93200cf16 advisory. Update brotli to 1.2.0 and python-urllib3 to 2.6.1. In python-urllib3: - Fixed a security issue where streaming API could improperly handle highly...

GHSA-GM62-XV2J-4W53 vulnerabilities

Vulnerabilities for packages: ggshield, request-1276, datadog-agent-fips, emissary, py3.13-scanner-test-libraries, dask-gateway, openstack-kolla-toolbox-2025.2, openstack-kolla-toolbox-2025.1-fips, kubeflow-volumes-web-app, azure-functions-host, nvidia-nsight-compute-13.3,...

GHSA-2XPW-W6GG-JR37 vulnerabilities

Vulnerabilities for packages: ggshield, request-1276, datadog-agent-fips, emissary, py3.13-scanner-test-libraries, dask-gateway, openstack-kolla-toolbox-2025.2, openstack-kolla-toolbox-2025.1-fips, kubeflow-volumes-web-app, azure-functions-host, nvidia-nsight-compute-13.3,...

CVE-2025-66471 vulnerabilities

Vulnerabilities for packages: ggshield, request-1276, datadog-agent-fips, emissary, py3.13-scanner-test-libraries, dask-gateway, openstack-kolla-toolbox-2025.2, openstack-kolla-toolbox-2025.1-fips, kubeflow-volumes-web-app, azure-functions-host, nvidia-nsight-compute-13.3,...

CVE-2025-66418 vulnerabilities

Vulnerabilities for packages: ggshield, request-1276, datadog-agent-fips, emissary, py3.13-scanner-test-libraries, dask-gateway, openstack-kolla-toolbox-2025.2, openstack-kolla-toolbox-2025.1-fips, kubeflow-volumes-web-app, azure-functions-host, nvidia-nsight-compute-13.3,...

GHSA-2XPW-W6GG-JR37 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, datadog-agent, mlflow, dask-kubernetes, airflow, kubeflow-volumes-web-app, k8s-sidecar, kserve, py3-urllib3, kubeflow-pipelines, py3-pip, open-webui, pypy-3.10, kubeflow-katib, py3-cassandra-medusa, emissary, semgrep, confluent-docker-utils,...

CVE-2025-66418 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, datadog-agent, mlflow, dask-kubernetes, airflow, kubeflow-volumes-web-app, k8s-sidecar, kserve, py3-urllib3, kubeflow-pipelines, py3-pip, open-webui, pypy-3.10, kubeflow-katib, py3-cassandra-medusa, emissary, semgrep, confluent-docker-utils,...

AZL-71837 CVE-2025-66471 affecting package python-urllib3 for versions less than 2.0.7-3

urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than...

AZL-71846 CVE-2025-66418 affecting package python-urllib3 for versions less than 1.26.19-3

urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory...

AZL-71834 CVE-2025-66418 affecting package python-urllib3 for versions less than 2.0.7-3

urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory...

Security Bulletin: IBM watsonx Orchestrate Developer Edition is vulnerable to Open Redirect / Server-Side Request Forgery (SSRF) bypass due to Python

Summary Python is used by IBM watsonx Orchestrate Developer Edition as part of image: tools-runtime-manager Vulnerability Details CVEID:CVE-2025-50182 DESCRIPTION: urllib3 is a user-friendly HTTP client library for Python. Starting in version 2.2.0 and prior to 2.5.0, urllib3 does not control...

Moderate Photon OS Security Update - PHSA-2025-5.0-91-0688

Updates of 'python3-pip', 'python3-urllib3' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2025-4.0-0912

Updates of 'python3-urllib3' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2025-5.0-0688

Updates of 'python3-pip', 'python3-urllib3' packages of Photon OS have been released...

Mageia: Security Advisory (MGASA-2025-0281)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Siemens SIMATIC S7-1500 Improper Certificate Validation (CVE-2021-28363)

The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy if an SSLContext isn't given via proxyconfig doesn't verify the hostname of the certificate. This means certificates for...

Updated python-urllib3 & python-pip packages fix security vulnerability

Urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation. CVE-2025-50181...

MGASA-2025-0281 Updated python-urllib3 & python-pip packages fix security vulnerability

Urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation. CVE-2025-50181...

Security Bulletin: IBM Edge Data Collector uses urllib3-1.26.19-py2.py3-none-any.whl which is vulnerable to CVE-2025-50181, CVE-2025-50182.

Summary IBM Edge Data Collector uses urllib3-1.26.19-py2.py3-none-any.whl which is vulnerable to CVE-2025-50181, CVE-2025-50182. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-50181 DESCRIPTION: urllib3 is a user-friendly HTTP...