CVE catalog

CVE-2024-37891

pip vulnerability

[CVE catalog]

Severity
Medium · CVSS 4.4CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
1.14% · Oct 25, 2026

urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with `ProxyManager`, the `Proxy-Authorization` header is only sent to the configured proxy, as expected. However, when sending HTTP requests *without* using urllib3's proxy support, it's possible to accidentally configure the `Proxy-Authorization` header even though it won't have any effect as the request is not using a forwarding proxy or a tunneling proxy. In those cases, urllib3 doesn't treat the `Proxy-Authorization` HTTP header as one carrying authentication material and thus doesn't strip the header on cross-origin redirects. Because this is a highly unlikely scenario, we believe the severity of this vulnerability is low for almost all users. Out of an abundance of caution urllib3 will automatically strip the `Proxy-Authorization` header during cross-origin redirects to avoid the small chance that users are doing this on accident. Users should use urllib3's proxy support or disable automatic redirects to achieve safe processing of the `Proxy-Authorization` header, but we still decided to strip the header by default in order to further protect users who aren't using the correct approach. We believe the number of usages affected by this advisory is low. It requires all of the following to be true to be exploited: 1. Setting the `Proxy-Authorization` header without using urllib3's built-in proxy support. 2. Not disabling HTTP redirects. 3. Either not using an HTTPS origin server or for the proxy or target origin to redirect to a malicious origin. Users are advised to update to either version 1.26.19 or version 2.2.2. Users unable to upgrade may use the `Proxy-Authorization` header with urllib3's `ProxyManager`, disable HTTP redirects using `redirects=False` when sending requests, or not user the `Proxy-Authorization` header as mitigations.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpython-urllib3sid2.8.0-2fixed
Debianpython-urllib3forky2.8.0-2fixed
Debianpython-urllib3trixie2.3.0-3+deb13u2fixed
Debianpython-urllib3trixie-security2.3.0-3+deb13u2fixed
Debianpython-urllib3bookworm1.26.12-1+deb12u4fixed
Debianpython-urllib3bookworm-security1.26.12-1+deb12u4fixed
Ubuntupython-pipnoble24.0+dfsg-1ubuntu1.1fixed
Ubuntupython3-pipnoble24.0+dfsg-1ubuntu1.1fixed
Ubuntupython3-pip-whlnoble24.0+dfsg-1ubuntu1.1fixed
Ubuntupython-urllib3noble2.0.7-1ubuntu0.1fixed
Ubuntupython3-urllib3noble2.0.7-1ubuntu0.1fixed
PyPIurllib3Not reported2.2.2fixed
PyPIurllib3Not reported2.2.2fixed
PyPIurllib3Not reported2.2.2fixed
PyPIurllib3Not reported1.26.19fixed
Ubuntupython-pippro9.0.1-2vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.1vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.2vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.3vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.4vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.5vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.5+esm2vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.5+esm3vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.6vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.6+esm1vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.7vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.7+esm1vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.8vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.8+esm1vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.8+esm2vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.8+esm4vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.8+esm6fixed
Ubuntupython-urllib3pro1.21.1-1vulnerable
Ubuntupython-urllib3pro1.22-1vulnerable
Ubuntupython-urllib3pro1.22-1ubuntu0.18.04.1vulnerable
Ubuntupython-urllib3pro1.22-1ubuntu0.18.04.2vulnerable
Ubuntupython-urllib3pro1.22-1ubuntu0.18.04.2+esm1vulnerable
Ubuntupython-urllib3pro1.22-1ubuntu0.18.04.2+esm2fixed
Ubuntupython-pip20.0418.1-5vulnerable
Ubuntupython-pip20.0418.1-5build1vulnerable
Ubuntupython-pip20.0418.1-5ubuntu1vulnerable
Ubuntupython-pip20.0420.0.2-2vulnerable
Ubuntupython-pip20.0420.0.2-4vulnerable
Ubuntupython-pip20.0420.0.2-5vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.1vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.3vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.4vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.5vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.6vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.7vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.8vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.9vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.10vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.11fixed
Ubuntupython-urllib320.041.24.1-1ubuntu1vulnerable
Ubuntupython-urllib320.041.24.1-1ubuntu2vulnerable
Ubuntupython-urllib320.041.25.8-1vulnerable
Ubuntupython-urllib320.041.25.8-2vulnerable
Ubuntupython-urllib320.041.25.8-2ubuntu0.1vulnerable
Ubuntupython-urllib320.041.25.8-2ubuntu0.2vulnerable
Ubuntupython-urllib320.041.25.8-2ubuntu0.3vulnerable
Ubuntupython-urllib320.041.25.8-2ubuntu0.4fixed
Ubuntupython-pip22.0420.3.4-4vulnerable
Ubuntupython-pip22.0421.3.1+dfsg-3vulnerable
Ubuntupython-pip22.0422.0.2+dfsg-1vulnerable
Ubuntupython-pip22.0422.0.2+dfsg-1ubuntu0.1vulnerable
Ubuntupython-pip22.0422.0.2+dfsg-1ubuntu0.2vulnerable
Ubuntupython-pip22.0422.0.2+dfsg-1ubuntu0.3vulnerable
Ubuntupython-pip22.0422.0.2+dfsg-1ubuntu0.4vulnerable
Ubuntupython-pip22.0422.0.2+dfsg-1ubuntu0.5fixed
Ubuntupython-urllib322.041.26.5-1~exp1vulnerable
Ubuntupython-urllib322.041.26.5-1~exp1ubuntu0.1vulnerable
Ubuntupython-urllib322.041.26.5-1~exp1ubuntu0.2fixed
Ubuntupython-pip24.0423.2+dfsg-1vulnerable
Ubuntupython-pip24.0423.3+dfsg-1vulnerable
Ubuntupython-pip24.0424.0+dfsg-1vulnerable
Ubuntupython-pip24.0424.0+dfsg-1ubuntu1vulnerable
Ubuntupython-pip24.0424.0+dfsg-1ubuntu1.1fixed
Ubuntupython-urllib324.041.26.16-1vulnerable
Ubuntupython-urllib324.041.26.18-1vulnerable
Ubuntupython-urllib324.042.0.7-1vulnerable
Ubuntupython-urllib324.042.0.7-1ubuntu0.1fixed
Ubuntupython-urllib3pro1.21.1-1vulnerable
Ubuntupython-urllib3pro1.22-1vulnerable
Ubuntupython-urllib3pro1.22-1ubuntu0.18.04.1vulnerable
Ubuntupython-urllib3pro1.22-1ubuntu0.18.04.2vulnerable
Ubuntupython-urllib3pro1.22-1ubuntu0.18.04.2+esm1vulnerable
Ubuntupython-urllib3pro1.22-1ubuntu0.18.04.2+esm2fixed
Ubuntupython-urllib320.041.24.1-1ubuntu1vulnerable
Ubuntupython-urllib320.041.24.1-1ubuntu2vulnerable
Ubuntupython-urllib320.041.25.8-1vulnerable
Ubuntupython-urllib320.041.25.8-2vulnerable
Ubuntupython-urllib320.041.25.8-2ubuntu0.1vulnerable
Ubuntupython-urllib320.041.25.8-2ubuntu0.2vulnerable
Ubuntupython-urllib320.041.25.8-2ubuntu0.3vulnerable
Ubuntupython-urllib320.041.25.8-2ubuntu0.4fixed
Ubuntupython-urllib322.041.26.5-1~exp1vulnerable
Ubuntupython-urllib322.041.26.5-1~exp1ubuntu0.1vulnerable
Ubuntupython-urllib322.041.26.5-1~exp1ubuntu0.2fixed
Ubuntupython-urllib324.041.26.16-1vulnerable
Ubuntupython-urllib324.041.26.18-1vulnerable
Ubuntupython-urllib324.042.0.7-1vulnerable
Ubuntupython-urllib324.042.0.7-1ubuntu0.1fixed
Ubuntupython-pippro9.0.1-2vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.1vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.2vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.3vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.4vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.5vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.5+esm2vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.5+esm3vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.6vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.6+esm1vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.7vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.7+esm1vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.8vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.8+esm1vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.8+esm2vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.8+esm4vulnerable
Ubuntupython-pippro9.0.1-2.3~ubuntu1.18.04.8+esm6fixed
Ubuntupython-pip20.0418.1-5vulnerable
Ubuntupython-pip20.0418.1-5build1vulnerable
Ubuntupython-pip20.0418.1-5ubuntu1vulnerable
Ubuntupython-pip20.0420.0.2-2vulnerable
Ubuntupython-pip20.0420.0.2-4vulnerable
Ubuntupython-pip20.0420.0.2-5vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.1vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.3vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.4vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.5vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.6vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.7vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.8vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.9vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.10vulnerable
Ubuntupython-pip20.0420.0.2-5ubuntu1.11fixed
Ubuntupython-pip22.0420.3.4-4vulnerable
Ubuntupython-pip22.0421.3.1+dfsg-3vulnerable
Ubuntupython-pip22.0422.0.2+dfsg-1vulnerable
Ubuntupython-pip22.0422.0.2+dfsg-1ubuntu0.1vulnerable
Ubuntupython-pip22.0422.0.2+dfsg-1ubuntu0.2vulnerable
Ubuntupython-pip22.0422.0.2+dfsg-1ubuntu0.3vulnerable
Ubuntupython-pip22.0422.0.2+dfsg-1ubuntu0.4vulnerable
Ubuntupython-pip22.0422.0.2+dfsg-1ubuntu0.5fixed
Ubuntupython-pip24.0423.2+dfsg-1vulnerable
Ubuntupython-pip24.0423.3+dfsg-1vulnerable
Ubuntupython-pip24.0424.0+dfsg-1vulnerable
Ubuntupython-pip24.0424.0+dfsg-1ubuntu1vulnerable
Ubuntupython-pip24.0424.0+dfsg-1ubuntu1.1fixed
Opensuseoci-clitumbleweed3.76.2-1.1fixed
Susepython-urllib3linux micro 6.02.1.0-2.1fixed
Susepython-urllib3linux enterprise module for public cloud 15 sp42.0.7-150400.7.18.1fixed
Susepython-urllib3linux enterprise module for python 3 15 sp52.0.7-150400.7.18.1fixed
Susepython-urllib3linux enterprise module for python 3 15 sp62.0.7-150400.7.18.1fixed
Opensusepython-urllib3leap 15.52.0.7-150400.7.18.1fixed
Opensusepython-urllib3leap 15.62.0.7-150400.7.18.1fixed
Susepython-urllib3linux enterprise module for public cloud 121.25.10-3.40.1fixed
Susepython-urllib3linux enterprise software development kit 12 sp51.25.10-3.40.1fixed
Susepython-urllib3linux enterprise server 12 sp51.25.10-3.40.1fixed
Susepython-urllib3linux enterprise server for sap applications 12 sp51.25.10-3.40.1fixed
Susepython-urllib3linux enterprise workstation extension 12 sp51.25.10-3.40.1fixed
Susepython-urllib3linux enterprise micro 5.31.25.10-150300.4.12.1fixed
Susepython-urllib3linux enterprise micro 5.41.25.10-150300.4.12.1fixed
Susepython-urllib3linux enterprise micro 5.51.25.10-150300.4.12.1fixed
Susepython-urllib3linux enterprise module for basesystem 15 sp51.25.10-150300.4.12.1fixed
Susepython-urllib3linux enterprise module for basesystem 15 sp61.25.10-150300.4.12.1fixed
Susepython-urllib3linux enterprise micro 5.11.25.10-150300.4.12.1fixed
Susepython-urllib3linux enterprise micro 5.21.25.10-150300.4.12.1fixed
Opensusepython-urllib3leap micro 5.51.25.10-150300.4.12.1fixed
Opensusepython-urllib3leap 15.51.25.10-150300.4.12.1fixed
Susepython-urllib3_1linux enterprise module for python 3 15 sp61.26.18-150600.3.3.1fixed
Opensusepython-urllib3_1leap 15.61.26.18-150600.3.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpython-urllib3sourcesid2.2.3-3not yet assignedNot reported[1074149]
Debianpython-urllib3sourceforky2.2.3-3not yet assignedNot reported[1074149]
Debianpython-urllib3sourcetrixie2.2.3-3not yet assignedNot reported[1074149]
Debianpython-urllib3sourcebookworm1.26.12-1+deb12u1not yet assignedNot reported[1074149]
Ubuntupython-pipdebnoble24.0+dfsg-1ubuntu1.1Not reportedNot reportedNot reported
Ubuntupython3-pipdebnoble24.0+dfsg-1ubuntu1.1Not reportedNot reportedNot reported
Ubuntupython3-pip-whldebnoble24.0+dfsg-1ubuntu1.1Not reportedNot reportedNot reported
Ubuntupython-urllib3debnoble2.0.7-1ubuntu0.1Not reportedNot reportedNot reported
Ubuntupython3-urllib3debnoble2.0.7-1ubuntu0.1Not reportedNot reportedNot reported
PyPIurllib3PyPINot reported2.2.2Not reportedGHSA-34JH-P97F-MPXFNot reported
PyPIurllib3PyPINot reported2.2.2Not reportedNot reportedNot reported
PyPIurllib3PyPINot reported2.2.2Not reportedNot reportedNot reported
PyPIurllib3PyPINot reported1.26.19Not reportedNot reportedNot reported
Ubuntupython-pipdebpro9.0.1-2.3~ubuntu1.18.04.8+esm6Not reportedUBUNTU-CVE-2024-37891Not reported
Ubuntupython-urllib3debpro1.22-1ubuntu0.18.04.2+esm2Not reportedUBUNTU-CVE-2024-37891Not reported
Ubuntupython-pipdeb20.0420.0.2-5ubuntu1.11Not reportedUBUNTU-CVE-2024-37891Not reported
Ubuntupython-urllib3deb20.041.25.8-2ubuntu0.4Not reportedUBUNTU-CVE-2024-37891Not reported
Ubuntupython-pipdeb22.0422.0.2+dfsg-1ubuntu0.5Not reportedUBUNTU-CVE-2024-37891Not reported
Ubuntupython-urllib3deb22.041.26.5-1~exp1ubuntu0.2Not reportedUBUNTU-CVE-2024-37891Not reported
Ubuntupython-pipdeb24.0424.0+dfsg-1ubuntu1.1Not reportedUBUNTU-CVE-2024-37891Not reported
Ubuntupython-urllib3deb24.042.0.7-1ubuntu0.1Not reportedUBUNTU-CVE-2024-37891Not reported
Ubuntupython-urllib3debpro1.22-1ubuntu0.18.04.2+esm2Not reportedUSN-7084-1Not reported
Ubuntupython-urllib3deb20.041.25.8-2ubuntu0.4Not reportedUSN-7084-1Not reported
Ubuntupython-urllib3deb22.041.26.5-1~exp1ubuntu0.2Not reportedUSN-7084-1Not reported
Ubuntupython-urllib3deb24.042.0.7-1ubuntu0.1Not reportedUSN-7084-1Not reported
Ubuntupython-pipdebpro9.0.1-2.3~ubuntu1.18.04.8+esm6Not reportedUSN-7084-2Not reported
Ubuntupython-pipdeb20.0420.0.2-5ubuntu1.11Not reportedUSN-7084-2Not reported
Ubuntupython-pipdeb22.0422.0.2+dfsg-1ubuntu0.5Not reportedUSN-7084-2Not reported
Ubuntupython-pipdeb24.0424.0+dfsg-1ubuntu1.1Not reportedUSN-7084-2Not reported
Opensuseoci-clirpmtumbleweed3.76.2-1.1Not reportedOPENSUSE-SU-2026:10539-1Not reported
Susepython-urllib3rpmlinux micro 6.02.1.0-2.1Not reportedSUSE-SU-2025:20037-1Not reported
Susepython-urllib3rpmlinux enterprise module for public cloud 15 sp42.0.7-150400.7.18.1Not reportedSUSE-SU-2024:2320-1Not reported
Susepython-urllib3rpmlinux enterprise module for python 3 15 sp52.0.7-150400.7.18.1Not reportedSUSE-SU-2024:2320-1Not reported
Susepython-urllib3rpmlinux enterprise module for python 3 15 sp62.0.7-150400.7.18.1Not reportedSUSE-SU-2024:2320-1Not reported
Opensusepython-urllib3rpmleap 15.52.0.7-150400.7.18.1Not reportedSUSE-SU-2024:2320-1Not reported
Opensusepython-urllib3rpmleap 15.62.0.7-150400.7.18.1Not reportedSUSE-SU-2024:2320-1Not reported
Susepython-urllib3rpmlinux enterprise module for public cloud 121.25.10-3.40.1Not reportedSUSE-SU-2024:2879-1Not reported
Susepython-urllib3rpmlinux enterprise software development kit 12 sp51.25.10-3.40.1Not reportedSUSE-SU-2024:2879-1Not reported
Susepython-urllib3rpmlinux enterprise server 12 sp51.25.10-3.40.1Not reportedSUSE-SU-2024:2879-1Not reported
Susepython-urllib3rpmlinux enterprise server for sap applications 12 sp51.25.10-3.40.1Not reportedSUSE-SU-2024:2879-1Not reported
Susepython-urllib3rpmlinux enterprise workstation extension 12 sp51.25.10-3.40.1Not reportedSUSE-SU-2024:2879-1Not reported
Susepython-urllib3rpmlinux enterprise micro 5.31.25.10-150300.4.12.1Not reportedSUSE-SU-2024:2662-1Not reported
Susepython-urllib3rpmlinux enterprise micro 5.41.25.10-150300.4.12.1Not reportedSUSE-SU-2024:2662-1Not reported
Susepython-urllib3rpmlinux enterprise micro 5.51.25.10-150300.4.12.1Not reportedSUSE-SU-2024:2662-1Not reported
Susepython-urllib3rpmlinux enterprise module for basesystem 15 sp51.25.10-150300.4.12.1Not reportedSUSE-SU-2024:2662-1Not reported
Susepython-urllib3rpmlinux enterprise module for basesystem 15 sp61.25.10-150300.4.12.1Not reportedSUSE-SU-2024:2662-1Not reported
Susepython-urllib3rpmlinux enterprise micro 5.11.25.10-150300.4.12.1Not reportedSUSE-SU-2024:2662-1Not reported
Susepython-urllib3rpmlinux enterprise micro 5.21.25.10-150300.4.12.1Not reportedSUSE-SU-2024:2662-1Not reported
Opensusepython-urllib3rpmleap micro 5.51.25.10-150300.4.12.1Not reportedSUSE-SU-2024:2662-1Not reported
Opensusepython-urllib3rpmleap 15.51.25.10-150300.4.12.1Not reportedSUSE-SU-2024:2662-1Not reported
Susepython-urllib3_1rpmlinux enterprise module for python 3 15 sp61.26.18-150600.3.3.1Not reportedSUSE-SU-2024:4358-1Not reported
Opensusepython-urllib3_1rpmleap 15.61.26.18-150600.3.3.1Not reportedSUSE-SU-2024:4358-1Not reported

[Debian bug #1074149]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [python3-urllib3]Unknown

    Source package: [python-urllib3]

    Details (4)

    • 1.26.12-1+deb12u4 · all · bookworm

      Fixed · Fixed: 1.26.12-1+deb12u1

      usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12

    • 1.26.12-1+deb12u4 · all · bookworm

      Fixed · Fixed: 1.26.12-1+deb12u1

      usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12

    • 1.26.12-1+deb12u4 · all · bookworm-security

      Fixed · Fixed: 1.26.12-1+deb12u1

      usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12

    • 1.26.12-1+deb12u4 · all · bookworm-security

      Fixed · Fixed: 1.26.12-1+deb12u1

      usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12

[Debian 13 (Trixie)]

  • [python3-urllib3]Unknown

    Source package: [python-urllib3]

    Details (4)

    • 2.3.0-3+deb13u2 · all · trixie

      Fixed · Fixed: 2.2.3-3

      usn · python-urllib3 · debian · 13

    • 2.3.0-3+deb13u2 · all · trixie

      Fixed · Fixed: 2.2.3-3

      usn · python-urllib3 · debian · 13

    • 2.3.0-3+deb13u2 · all · trixie-security

      Fixed · Fixed: 2.2.3-3

      usn · python-urllib3 · debian · 13

    • 2.3.0-3+deb13u2 · all · trixie-security

      Fixed · Fixed: 2.2.3-3

      usn · python-urllib3 · debian · 13

[openSUSE Tumbleweed]

  • [oci-cli]Unknown

    Source package: [oci-cli]

    Details (1)

    • 3.83.0-1.2 · noarch · tumbleweed

      Fixed · Fixed: 3.76.2-1.1

      usn · oci-cli · opensuse · tumbleweed

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]