CVE-2026-97689

The urllib3 Python HTTP client library (versions 1.10.3 through 2.8.0 ) is vulnerable to an unbounded memory allocation issue in the HTTPResponse.read_chunked and HTTPResponse.stream methods. The root cause is that the streaming chunk parser buffers the chunk-size field until it encounters a newl...