2345 matches found
urllib3: urllib3: Denial of Service due to excessive HTTP response decompression
A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response,...
EulerOS Virtualization 2.12.1 : python-pip (EulerOS-SA-2026-2086)
According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in...
EulerOS Virtualization 2.13.0 : python-urllib3 (EulerOS-SA-2026-2186)
According to the versions of the python-urllib3 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP...
EulerOS Virtualization 2.12.0 : python-pip (EulerOS-SA-2026-2111)
According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in...
EulerOS Virtualization 2.13.0 : python-pip (EulerOS-SA-2026-2183)
According to the versions of the python-pip package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with...
EulerOS Virtualization 2.13.1 : python-urllib3 (EulerOS-SA-2026-2147)
According to the versions of the python-urllib3 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP...
EulerOS Virtualization 2.13.1 : python-pip (EulerOS-SA-2026-2144)
According to the versions of the python-pip package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with...
EulerOS Virtualization 2.10.0 : python-pip (EulerOS-SA-2026-2061)
According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in...
OESA-2026-2543 python-pip security update
%changelog Thu May 14 2026 markeryang [email protected] - 23.3.1-11 - Fix CVE-2026-3219 Security Fixes: When following cross-origin redirects for requests made using urllib3's high-level APIs, such as urllib3.request, PoolManager.request, and ProxyManager.request, sensitive headers — Authorization...
OESA-2026-2541 python-pip security update
pip is the package installer for Python. You can use pip to install packages from the Python Package Index and other indexes. %global bashcompdir %b=$pkg-config --variable=completionsdir bash-completion 2/dev/null; echo $b:-/bashcompletion.d Name: python-pip Version: 20.2.2 Release: 4 Summary: A...
Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)
Summary Multiple vulnerabilities were remediated in IBM Observability with Instana OnPrem build 1.0.319 Vulnerability Details CVEID:CVE-2025-66418 DESCRIPTION: urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the...
Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : urllib3 vulnerabilities (USN-8379-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8379-1 advisory. It was discovered that urllib3 incorrectly handled cross-origin redirects in ProxyManager. A remote attacker could possib...
ROOT-APP-PYPI-CVE-2026-44432 CVE-2026-44432 in rootio-urllib3 - Patched by Root
Root has patched CVE-2026-44432 in the rootio-urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-21441 CVE-2026-21441 in rootio-urllib3 - Patched by Root
Root has patched CVE-2026-21441 in the rootio-urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-44431 CVE-2026-44431 in rootio-urllib3 - Patched by Root
Root has patched CVE-2026-44431 in the rootio-urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-66418 CVE-2025-66418 in rootio-urllib3 - Patched by Root
Root has patched CVE-2025-66418 in the rootio-urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-50182 CVE-2025-50182 in rootio-urllib3 - Patched by Root
Root has patched CVE-2025-50182 in the rootio-urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2021-33503 CVE-2021-33503 in rootio-urllib3 - Patched by Root
Root has patched CVE-2021-33503 in the rootio-urllib3 package for Root:PyPI. Multiple fixed versions available...