pkg:Debian/python-urllib3

All known vulnerabilities

• CRITICAL9.8CVE-2018-20060python-urllib3 - security update
  from 0, < 1.24-1
• CRITICAL9.8CVE-2018-20060python-urllib3 - security update
  from 0, < 1.19.1-1+deb9u1
• HIGH7.5CVE-2026-9375urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in its streaming API (`preload_content=False`) when using Brotli support.
  from 0
• HIGH7.5urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API
  from 0, < 2.7.0-1
• HIGH7.5Uncontrolled Resource Consumption in urllib3
  from 0, < 1.25.8-1
• HIGH7.5Improper Certificate Validation in urllib3
  from 0, < 1.25.6-4
• MEDIUM6.5CRLF injection in urllib3
  from 0, < 1.25.9-1
• MEDIUM6.1python-urllib3 - security update
  from 0, < 1.25.6-4
• MEDIUM6.1python-urllib3 - security update
  from 0, < 1.24.1-1+deb10u1
• MEDIUM6.1python-urllib3 - security update
  from 0, < 1.25.6-4
• MEDIUM6.1python-urllib3 - security update
  from 0, < 1.9.1-3+deb8u1
• MEDIUM5.9python-urllib3 - security update
  from 0, < 1.26.5-1~exp1+deb11u1
• MEDIUM5.9python-urllib3 - security update
  from 0, < 1.26.5-1~exp1+deb11u1
• MEDIUM5.3urllib3: Sensitive headers forwarded across origins in proxied low-level redirects
  from 0, < 1.26.5-1~exp1+deb11u4
• MEDIUM4.2python-urllib3 - security update
  from 0, < 1.26.5-1~exp1+deb11u1
• MEDIUM4.2python-urllib3 - security update
  from 0, < 1.24.1-1+deb10u2
• —bzr - security update
  from 0, < 1.6-2