Login Request a demo
UR
Product
Urllib3
by Python · last CVE Sep 29, 2026
22
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Vulnerabilities22In the news0Timeline
Severity mix
Critical 1High 10Medium 10Low 1
Severity
All severities22Critical1High10Medium10Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Urllib3 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-37891
6.5
1%
Jun 17
urllib3 is a user-friendly HTTP client library for Python
Affected: before 1.26.19; 2.0.0 before 2.2.2
CVE-2021-28363
6.5
2%
Mar 15
The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies
Affected: 1.26.0 before 1.26.4
CVE-2020-26137
6.5
2%
Sep 30
urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of…
Affected: before 1.25.9
CVE-2025-50182
6.1
1%
Jun 19
urllib3 is a user-friendly HTTP client library for Python
Affected: 2.2.0 before 2.5.0
CVE-2025-50181
6.1
0%
Jun 19
urllib3 is a user-friendly HTTP client library for Python
Affected: before 2.5.0
CVE-2018-25091
6.1
1%
Oct 15
urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme)
Affected: before 1.24.2
CVE-2019-11236
6.1
2%
Apr 15
In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter
Affected: through 1.24.2
CVE-2026-97688
5.3
0%
Sep 29
urllib3: Chunked Deflate streaming can enter an infinite loop
Affected: 2.6.2 before 2.8.0
CVE-2026-44431
5.3
0%
May 13
urllib3: Sensitive headers forwarded across origins in proxied low-level redirects
Affected: 1.23 before 2.7.0
CVE-2023-45803
4.2
1%
Oct 17
urllib3 is a user-friendly HTTP client library for Python
Affected: before 1.26.18; 2.0.0 before 2.0.7
Showing 10