Lucene search
K

781 matches found

vulnersOsv
vulnersOsv
added 2025/12/05 4:40 p.m.0 views

0lever-utils (>=0.0.2 <=0.0.7), 1337x (=1.2.5) +16397 more potentially affected by CVE-2025-66471 via urllib3 (>=1.10.2 <=2.5.0)

urllib3 PYPI version =1.10.2, =0.0.2, =0.3.0, =0.0.1a0, =2.3.84, =0.1.0, =1.1.2, =0.1.0, =0.1.0, =0.0.2, =0.0.5, =0.0.7 - a-mailx =0.1.0 - a-texam =1.1.0 and more Source cves: CVE-2025-66471 Source advisory: SNYK:PYTHON-URLLIB3-14192442...

8.9CVSS6.7AI score0.00017EPSS
Exploits0
OSV
OSV
added 2025/12/05 4:15 p.m.2 views

AZL-71846 CVE-2025-66418 affecting package python-urllib3 for versions less than 1.26.19-3

urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory...

8.9CVSS6.6AI score0.00021EPSS
Exploits0References1
OSV
OSV
added 2025/12/05 4:15 p.m.5 views

AZL-71834 CVE-2025-66418 affecting package python-urllib3 for versions less than 2.0.7-3

urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory...

8.9CVSS6.7AI score0.00021EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/11/28 11:53 a.m.5 views

Security Bulletin: IBM watsonx Orchestrate Developer Edition is vulnerable to Open Redirect / Server-Side Request Forgery (SSRF) bypass due to Python

Summary Python is used by IBM watsonx Orchestrate Developer Edition as part of image: tools-runtime-manager Vulnerability Details CVEID:CVE-2025-50182 DESCRIPTION: urllib3 is a user-friendly HTTP client library for Python. Starting in version 2.2.0 and prior to 2.5.0, urllib3 does not control...

6.1CVSS6.3AI score0.00066EPSS
Exploits0Affected Software1
Photon
Photon
added 2025/11/21 12:0 a.m.3 views

Moderate Photon OS Security Update - PHSA-2025-5.0-0688

Updates of 'python3-pip', 'python3-urllib3' packages of Photon OS have been released...

6.1CVSS6.4AI score0.00079EPSS
Exploits1
Photon
Photon
added 2025/11/21 12:0 a.m.3 views

Moderate Photon OS Security Update - PHSA-2025-4.0-0912

Updates of 'python3-urllib3' packages of Photon OS have been released...

6.1CVSS6.9AI score0.00079EPSS
Exploits1
OpenVAS
OpenVAS
added 2025/11/13 12:0 a.m.2 views

Mageia: Security Advisory (MGASA-2025-0281)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS7AI score0.00079EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2025/11/13 12:0 a.m.2 views

Siemens SIMATIC S7-1500 Improper Certificate Validation (CVE-2021-28363)

The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy if an SSLContext isn't given via proxyconfig doesn't verify the hostname of the certificate. This means certificates for...

6.5CVSS6.8AI score0.00124EPSS
Exploits0References4
Mageia
Mageia
added 2025/11/12 9:29 p.m.3 views

Updated python-urllib3 & python-pip packages fix security vulnerability

Urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation. CVE-2025-50181...

6.1CVSS6.5AI score0.00079EPSS
Exploits1References3
OSV
OSV
added 2025/11/12 9:29 p.m.2 views

MGASA-2025-0281 Updated python-urllib3 & python-pip packages fix security vulnerability

Urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation. CVE-2025-50181...

6.1CVSS6.4AI score0.00079EPSS
Exploits1References4
IBM Security Bulletins
IBM Security Bulletins
added 2025/11/03 10:45 a.m.4 views

Security Bulletin: IBM Edge Data Collector uses urllib3-1.26.19-py2.py3-none-any.whl which is vulnerable to CVE-2025-50181, CVE-2025-50182.

Summary IBM Edge Data Collector uses urllib3-1.26.19-py2.py3-none-any.whl which is vulnerable to CVE-2025-50181, CVE-2025-50182. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-50181 DESCRIPTION: urllib3 is a user-friendly HTTP...

6.1CVSS7.3AI score0.00079EPSS
Exploits1Affected Software1
AstraLinux
AstraLinux
added 2025/10/31 4:38 p.m.3 views

Astra Linux - уязвимость в python-urllib3

urllib3 is a user-friendly HTTP client library for Python. Starting in version 2.2.0 and prior to 2.5.0, urllib3 does not control redirects in browsers and Node.js. urllib3 supports being used in a Pyodide runtime utilizing the JavaScript Fetch API or falling back on XMLHttpRequest. This means...

6.1CVSS6.8AI score0.00066EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/10/24 12:0 a.m.1 views

EulerOS 2.0 SP13 : python-urllib3 (EulerOS-SA-2025-2309)

According to the versions of the python-urllib3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by...

6.1CVSS6.3AI score0.00079EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2025/10/24 12:0 a.m.1 views

Huawei EulerOS: Security Advisory for python-urllib3 (EulerOS-SA-2025-2277)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.7AI score0.00079EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2025/10/24 12:0 a.m.1 views

Huawei EulerOS: Security Advisory for python-urllib3 (EulerOS-SA-2025-2309)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.7AI score0.00079EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/10/24 12:0 a.m.1 views

EulerOS 2.0 SP13 : python-urllib3 (EulerOS-SA-2025-2277)

According to the versions of the python-urllib3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by...

6.1CVSS6.3AI score0.00079EPSS
Exploits1References2
OSV
OSV
added 2025/10/14 1:15 p.m.1 views

SUSE-SU-2025:20856-1 Security update for python-urllib3

This update for python-urllib3 fixes the following issues: - CVE-2025-50181: Pool managers now properly control redirects when retries is passed bsc1244925...

6.1CVSS5.8AI score0.00079EPSS
Exploits1References3
SUSE Linux
SUSE Linux
added 2025/10/14 1:15 p.m.1 views

Security update for python-urllib3

This update for python-urllib3 fixes the following issues: CVE-2025-50181: Pool managers now properly control redirects when retries is passed bsc1244925 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

6CVSS7.1AI score0.00079EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2025/10/13 12:0 a.m.2 views

Huawei EulerOS: Security Advisory for python-urllib3 (EulerOS-SA-2025-2245)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.7AI score0.00079EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2025/10/13 12:0 a.m.2 views

Huawei EulerOS: Security Advisory for python-urllib3 (EulerOS-SA-2025-2213)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.7AI score0.00079EPSS
Exploits1References2
Rows per page
Query Builder