UR
Product
Urllib3
22
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 1High 10Medium 10Low 1
Watch
Add Urllib3 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-97687 | 8.1 | Sep 29 | urllib3: HTTPS proxy TLS configuration may be ignored or overridden Affected: 1.26.0 before 2.8.0 |
| CVE-2023-43804 | 8.1 | Oct 4 | urllib3 is a user-friendly HTTP client library for Python Affected: before 1.26.17; 2.0.0 before 2.0.6 |
| CVE-2026-97689 | 7.5 | Sep 29 | urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory Affected: 1.10.3 before 2.8.0 |
| CVE-2026-44432 | 7.5 | May 13 | urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API Affected: 2.6.0 before 2.7.0 |
| CVE-2026-21441 | 7.5 | Jan 7 | urllib3 is an HTTP client library for Python Affected: 1.22 before 2.6.3 |
| CVE-2025-66471 | 7.5 | Dec 5 | urllib3 is a user-friendly HTTP client library for Python Affected: 1.0 before 2.6.0 |
| CVE-2025-66418 | 7.5 | Dec 5 | urllib3 is a user-friendly HTTP client library for Python Affected: 1.24 before 2.6.0 |
| CVE-2021-33503 | 7.5 | Jun 29 | An issue was discovered in urllib3 before 1.26.5 Affected: 1.25.4 before 1.26.5 |
| CVE-2020-7212 | 7.5 | Mar 6 | The _encode_invalid_chars function in util/url.py in the urllib3 library 1.25.2 through 1.25.7 for Python allows a denial of service (CPU consumption) because of an inefficient… Affected: 1.25.2 through 1.25.7 |
| CVE-2019-11324 | 7.5 | Apr 18 | The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in… Affected: before 1.24.2 |
Showing 10