UBUNTU-CVE-2026-21441

urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview urllib3 is a HTTP library with thread-safe connection pooling, file post, and more. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the streaming API when handling HTTP redirects. An attacker can cause excessive...

CVE-2026-22046

creationtimestamp| type| source ---|---|--- 2026-01-07 22:27:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbuj7vvzof2z 2026-01-07 23:10:30+00:00| published-proof-of-concept| Telegram/0oJDwAhtc18DERwb9VjD5vzlW29jjr74xBieCo4YDk1jmcA 2026-01-07 23:30:52+00:00| seen|...

CVE-2026-21441

urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP...

AZL-74153 CVE-2026-21441 affecting package tensorflow for versions less than 2.16.1-10

urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP...

ALPINE-CVE-2026-21441

urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP...

CVE-2026-22184

creationtimestamp| type| source ---|---|--- 2026-01-07 20:45:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115855767254890769 2026-01-07 21:18:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbufeycxx32x 2026-01-07 22:11:38+00:00| seen|...

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

Impact urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header e.g., gzip,...

CVE-2025-38535

creationtimestamp| type| source ---|---|--- 2026-01-07 19:07:58+00:00| seen| Telegram/Ju8JfUjH9zqeraQNJpKORHTFVyuyI7eY029BUOqxvCU9FY 2026-01-07 19:08:15+00:00| seen| Telegram/hJTfcx4e0m6EfcFVnO3jT9hnn52auvn9Rlc8cXvS590j6io...

CVE-2025-12543

creationtimestamp| type| source ---|---|--- 2026-01-07 16:56:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115854869228949121 2026-01-07 17:51:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbtzsserev27 2026-01-07 18:06:41+00:00| seen|...

CVE-2025-13371

creationtimestamp| type| source ---|---|--- 2026-01-07 08:24:17+00:00| seen| https://gist.github.com/Darkcrai86/d58f40576a71ed7ee9b9e2fa8ffb9323 2026-01-07 09:54:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbt76aeidx2q 2026-01-07 10:51:09+00:00| seen|...

CVE-2025-14017

creationtimestamp| type| source ---|---|--- 2026-01-07 06:13:14+00:00| seen| https://seclists.org/oss-sec/2026/q1/32 2026-01-07 07:33:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mbsxawpkja2w 2026-01-07 07:51:28+00:00| seen|...

CVE-2026-0628

creationtimestamp| type| source ---|---|--- 2026-01-07 03:29:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbsjmlhzvt2x 2026-01-07 03:47:53+00:00| seen| https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mbsknxjl5k2p 2026-01-07 07:57:15+00:00| seen|...

PT-2026-2060

Name of the Vulnerable Software and Affected Versions urllib3 versions 1.22 through 2.6.2 Description urllib3 is a Python HTTP client library. Its streaming API is designed for efficient handling of large HTTP responses by reading content in chunks. The library decompresses content based on the...

CVE-2025-20800

creationtimestamp| type| source ---|---|--- 2026-01-06 20:13:33+00:00| seen| Telegram/IDZM-U-kLaMeLOHSZRXTD9u0IyoQQmgHJLI16VuZIVt-ROU 2026-01-06 20:39:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrsqff3sy2p 2026-01-06 20:40:09+00:00| seen|...

CVE-2025-65212

creationtimestamp| type| source ---|---|--- 2026-01-06 18:07:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbrk7ofwfi2e 2026-01-06 18:32:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbrlnklw2e2a...

CVE-2025-14942

creationtimestamp| type| source ---|---|--- 2026-01-06 17:30:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115849338587032123 2026-01-06 17:52:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbrjg3zbyh2c 2026-01-06 19:07:47+00:00| published-proof-of-concept|...

CVE-2026-21411

creationtimestamp| type| source ---|---|--- 2026-01-06 07:38:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbqh3mdjdj2p 2026-01-06 08:00:30+00:00| published-proof-of-concept| Telegram/53PWlavJflmk9KVy816RzLjuDWOCqECbxBqxmsko9CXE9ZY 2026-01-06 09:49:43+00:00| seen|...

CVE-2025-14996

creationtimestamp| type| source ---|---|--- 2026-01-06 05:43:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbqanetrfw2p 2026-01-06 06:01:28+00:00| seen| Telegram/C8cKa5CH9I3NM3jeEU5QbxYCnFxc-EFqHQ9i2kT9Led6pw 2026-01-06 07:32:43+00:00| seen|...

GHSA-6JHG-HG63-JVVF

creationtimestamp| type| source ---|---|--- 2026-01-06 01:04:01+00:00| seen| Telegram/2QW8Fh9GNw2oVUTZekwxOkJVN6yFYGFerNd9WhPSIM87KY 2026-01-24 21:31:00+00:00| seen| https://gist.github.com/alon710/8b3299aac7c619edde4755a5c764a295 2026-01-24 21:31:01+00:00| seen|...