Amazon Linux 2023 : python3-urllib3 (ALAS2023-2026-3184)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3184 advisory. urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.readchunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser...

Rocky Linux 9.2 [CIQ] Security Update: python3-urllib3 (ciqsa-2026_1584)

The Rocky Linux 9.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261584 advisory. This advisory aggregates security fixes for the python-urllib3 SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2026-44432. Tenable has extracted the preceding...

Rocky Linux 8 [CIQ] Security Update: python3-urllib3 (crlsa-2024_5309)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20245309 advisory. urllib3: proxy-authorization request header is not stripped during cross-origin redirects CVE-2024-37891 Tenable has extracted the preceding description block...

Rocky Linux 8 [CIQ] Security Update: python3-urllib3 (crlsa-2026_36732)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202636732 advisory. urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers CVE-2026-44431 Tenable has extracted the preceding description blo...

Rocky Linux 9 [CIQ] Security Update: python3-urllib3 Multiple Vulnerabilities (crlsa-2026_28158)

The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202628158 advisory. urllib3: urllib3: Denial of Service due to excessive HTTP response decompression CVE-2026-44432 urllib3: urllib3: Information disclosure via cross-origin...

Rocky Linux 10.1 [CIQ] Security Update: python3-urllib3 Multiple Vulnerabilities (crlsa-2026_1086)

The Rocky Linux 10.1 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261086 advisory. urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66418 urllib3: urllib3 Streaming API improperly handles highly...

Rocky Linux 10.2 [CIQ] Security Update: python3-urllib3 Multiple Vulnerabilities (crlsa-2026_28000)

The Rocky Linux 10.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202628000 advisory. urllib3: urllib3: Denial of Service due to excessive HTTP response decompression CVE-2026-44432 urllib3: urllib3: Information disclosure via cross-orig...

Rocky Linux 9 [CIQ] Security Update: python3-urllib3 Multiple Vulnerabilities (crlsa-2026_1087)

The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261087 advisory. urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66418 urllib3: urllib3 Streaming API improperly handles highly...

Rocky Linux 8 [CIQ] Security Update: python3-urllib3 Multiple Vulnerabilities (crlsa-2026_1254)

The Rocky Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261254 advisory. urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66418 urllib3: urllib3 Streaming API improperly handles highly...

Rocky Linux 9.6 [CIQ] Security Update: python3-urllib3 Multiple Vulnerabilities (ciqsa-2026_1432)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261432 advisory. This advisory aggregates security fixes for the python-urllib3 SRPM in CIQ LTS 9.6. It addresses 5 CVEs: CVE-2026-44431, CVE-2026-44432, CVE-2025-66418,...

AlmaLinux 8 : python-urllib3 (ALSA-2026:36732)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:36732 advisory. urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers CVE-2026-44431 Tenable has extracted the preceding description...

Important Photon OS Security Update - PHSA-2026-5.0-0911

Updates of 'rubygem-nokogiri', 'rubygem-faraday', 'python3-mistune', 'python3-urllib3' packages of Photon OS have been released...

Medium: python3-urllib3

Issue Overview: urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connectionfromurl.urlopen..., assertsamehost=False still forward these sensitive headers. This vulnerability is fixed in 2.7.0...

Oracle Linux 10 : python-urllib3 (ELSA-2026-1086)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-1086 advisory. - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 Tenable has extracted the preceding description block directly from the Oracle Lin...

Important Photon OS Security Update - PHSA-2026-5.0-92-0744

Updates of 'python3-urllib3' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-91-0744

Updates of 'python3-urllib3' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-92-0741

Updates of 'linux-esx', 'python3-urllib3' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0741

Updates of 'linux', 'linux-esx', 'python3-urllib3' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-92-0726

Updates of 'sssd', 'python3-urllib3' packages of Photon OS have been released...

Amazon Linux 2 : python3-urllib3 (ALAS-2025-2916)

The version of python3-urllib3 installed on the remote host is prior to 1.25.6-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2916 advisory. urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all...