Lucene search
+L

7 matches found

Positive Technologies
Positive Technologies
added 2026/05/11 12:0 a.m.14 views

PT-2026-39745

🚨 High - urllib3 Sensitive Header Leak & Decompression Bomb Safeguard Bypass CVE-2026-31015 & CVE-2026-31020 Two critical vulnerabilities were identified in the urllib3 library Node.js/Python. The first flaw GHSA-qccp-gfcp-xxvc allows sensitive headers like Authorization and Cookie to be leaked...

5.8AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/19 12:0 a.m.3 views

MiracleLinux 8 : resource-agents-4.9.0-54.el8_10.27 (AXSA:2026-456:03)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-456:03 advisory. urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66418 urllib3: urllib3 Streaming API improperly handles highly...

8.9CVSS6.6AI score0.02667EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/16 12:0 a.m.20 views

RHEL 8 : fence-agents (RHSA-2026:1240)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1240 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or...

8.9CVSS5.9AI score0.02667EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/02/02 1:10 p.m.15 views

Important: Red Hat Security Advisory: python3.11-urllib3 security update

An update for python3.11-urllib3 is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

8.9CVSS6.6AI score0.02667EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/02/02 11:50 a.m.6 views

Important: Red Hat Security Advisory: python3.11-urllib3 security update

An update for python3.11-urllib3 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

8.9CVSS6.6AI score0.02667EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/29 12:0 a.m.5 views

MiracleLinux 9 : python3.12-urllib3-1.26.19-1.el9_7.1 (AXSA:2026-094:02)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-094:02 advisory. urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66418 urllib3: urllib3 Streaming API improperly handles highly...

8.9CVSS5.9AI score0.02667EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
added 2026/01/09 9:10 a.m.6 views

urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

...

8.9CVSS5.4AI score0.02667EPSS
SaveExploits0
Rows per page
Query Builder