[CVE-2026-97687 ] Published: Sep 21, 2026, 7:00:15 PM UTC
urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxy_ssl_context, proxy_assert_hostname, proxy_assert_fingerprint, ssl_context, cert_reqs, verify_mode, use_forwarding_for_h
High(7.6) Desconhecido Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Desconhecido
Version impact unknown
nvd · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm
Desconhecido
Version impact unknown
nvd · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm-security
Desconhecido
Version impact unknown
nvd · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm-security
Desconhecido
Version impact unknown
nvd · python-urllib3 · debian · bookworm
[CVE-2026-97688 ] Published: Sep 21, 2026, 7:00:15 PM UTC
urllib3 is an HTTP client library for Python. From 2.6.2 until 2.8.0, HTTPResponse.stream and HTTPResponse.read_chunked can enter an infinite loop because the Deflate decoder retains trailing bytes as
Medium(6.9) Desconhecido Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Desconhecido
Version impact unknown
nvd · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm
Desconhecido
Version impact unknown
nvd · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm-security
Desconhecido
Version impact unknown
nvd · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm-security
Desconhecido
Version impact unknown
nvd · python-urllib3 · debian · bookworm
[CVE-2026-97689 ] Published: Sep 21, 2026, 7:00:15 PM UTC
urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser bu
High(8.9) Desconhecido Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Desconhecido
Version impact unknown
nvd · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm
Desconhecido
Version impact unknown
nvd · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm-security
Desconhecido
Version impact unknown
nvd · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm-security
Desconhecido
Version impact unknown
nvd · python-urllib3 · debian · bookworm
[CVE-2026-44431 ] Published: May 11, 2026, 2:51:20 PM UTC
urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=Fal
High(8.2) Desconhecido Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Desconhecido · Corrigida: 1.26.12-1+deb12u4, 2.3.0-3+deb13u2, 2.7.0-1
Version impact unknown
nvd · python-urllib3 · debian · bookworm; pypi · python-urllib3 · debian · 12; pypi · python-urllib3 · debian · 13; pypi · python-urllib3 · debian · 14
1.26.12-1+deb12u4 · all · bookworm
Desconhecido · Corrigida: 1.26.12-1+deb12u4, 2.3.0-3+deb13u2, 2.7.0-1
Version impact unknown
nvd · python-urllib3 · debian · bookworm; pypi · python-urllib3 · debian · 12; pypi · python-urllib3 · debian · 13; pypi · python-urllib3 · debian · 14
1.26.12-1+deb12u4 · all · bookworm-security
Desconhecido · Corrigida: 1.26.12-1+deb12u4, 2.3.0-3+deb13u2, 2.7.0-1
Version impact unknown
nvd · python-urllib3 · debian · bookworm; pypi · python-urllib3 · debian · 12; pypi · python-urllib3 · debian · 13; pypi · python-urllib3 · debian · 14
1.26.12-1+deb12u4 · all · bookworm-security
Desconhecido · Corrigida: 1.26.12-1+deb12u4, 2.3.0-3+deb13u2, 2.7.0-1
Version impact unknown
nvd · python-urllib3 · debian · bookworm; pypi · python-urllib3 · debian · 12; pypi · python-urllib3 · debian · 13; pypi · python-urllib3 · debian · 14
[CVE-2026-44432 ] Published: Apr 11, 2026, 12:01:39 AM UTC
urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion (1) during the second HTTPResponse.read(amt=N) ca
High(8.9) Desconhecido A associação de pacotes está em andamento. Observado: Oct 27, 2026, 7:59:12 AM UTC
Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Não afetada
nvd · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm
Não afetada
nvd · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm-security
Não afetada
nvd · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm-security
Não afetada
nvd · python-urllib3 · debian · bookworm
[CVE-2026-21441 ] Published: Jan 7, 2026, 7:18:14 PM UTC
urllib3 vulnerability
High(8.9) Desconhecido A associação de pacotes está em andamento. Observado: Oct 27, 2026, 10:13:49 AM UTC
Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.26.12-1+deb12u3
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.26.12-1+deb12u3
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.26.12-1+deb12u3
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.26.12-1+deb12u3
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
[CVE-2025-66471 ] Published: Dec 5, 2025, 4:06:08 PM UTC
pip vulnerability
High(8.9) Desconhecido A associação de pacotes está em andamento. Observado: Oct 27, 2026, 10:56:04 AM UTC
Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Afetada
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm
Afetada
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Afetada
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Afetada
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
[CVE-2025-66418 ] Published: Dec 5, 2025, 4:02:15 PM UTC
pip vulnerabilities
High(8.9) Desconhecido A associação de pacotes está em andamento. Observado: Oct 27, 2026, 10:56:04 AM UTC
Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.26.12-1+deb12u2
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.26.12-1+deb12u2
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.26.12-1+deb12u2
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.26.12-1+deb12u2
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
[CVE-2025-50182 ] Published: Jun 18, 2025, 5:50:11 PM UTC
urllib3 vulnerabilities
Medium(5.3) Desconhecido A associação de pacotes está em andamento. Observado: Oct 27, 2026, 1:32:32 PM UTC
Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Não afetada
usn · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm
Não afetada
usn · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm-security
Não afetada
usn · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm-security
Não afetada
usn · python-urllib3 · debian · bookworm
[CVE-2025-50181 ] Published: Jun 18, 2025, 5:50:00 PM UTC
pip vulnerability
Medium(5.3) Desconhecido A associação de pacotes está em andamento. Observado: Oct 27, 2026, 1:32:32 PM UTC
Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.26.12-1+deb12u2
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.26.12-1+deb12u2
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.26.12-1+deb12u2
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.26.12-1+deb12u2
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
[CVE-2024-37891 ] Published: Jun 17, 2024, 12:00:00 AM UTC
pip vulnerability
Medium(4.4) Desconhecido A associação de pacotes está em andamento. Observado: Oct 28, 2026, 4:43:19 PM UTC
Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.26.12-1+deb12u1
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.26.12-1+deb12u1
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.26.12-1+deb12u1
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.26.12-1+deb12u1
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
[CVE-2023-45803 ] Published: Oct 13, 2023, 12:00:00 AM UTC
pip vulnerabilities
Medium(4.2) Desconhecido A associação de pacotes está em andamento. Observado: Oct 28, 2026, 5:43:41 PM UTC
Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.26.12-1+deb12u1
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.26.12-1+deb12u1
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.26.12-1+deb12u1
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.26.12-1+deb12u1
usn · python-urllib3 · debian · bookworm; usn · python-urllib3 · debian · 12
[CVE-2023-43804 ] Published: Oct 2, 2023, 11:27:05 PM UTC
python-urllib3: CVE-2023-43804
Medium(5.9) Desconhecido A associação de pacotes está em andamento. Observado: Oct 28, 2026, 5:43:46 PM UTC
Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.26.12-1+deb12u1
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.26.12-1+deb12u1
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.26.12-1+deb12u1
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.26.12-1+deb12u1
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
[CVE-2021-33503 ] Published: Jun 1, 2021, 12:00:00 AM UTC
python-urllib3: CVE-2021-33503
High(7.5) Desconhecido A associação de pacotes está em andamento. Observado: Oct 23, 2026, 5:57:54 PM UTC
Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.26.5-1~exp1
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.26.5-1~exp1
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.26.5-1~exp1
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.26.5-1~exp1
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
[CVE-2021-28363 ] Published: Mar 15, 2021, 12:00:00 AM UTC
python-urllib3: CVE-2021-28363
Medium(6.5) Desconhecido A associação de pacotes está em andamento. Observado: Oct 23, 2026, 5:55:29 PM UTC
Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.26.4-1
dsa · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.26.4-1
dsa · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.26.4-1
dsa · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.26.4-1
dsa · python-urllib3 · debian · bookworm
[CVE-2020-7212 ] Published: Mar 6, 2020, 12:00:00 AM UTC
python-urllib3: CVE-2020-7212
Low(0) Desconhecido A associação de pacotes está em andamento. Observado: Oct 23, 2026, 5:53:16 PM UTC
Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.25.8-1
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.25.8-1
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.25.8-1
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.25.8-1
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
[CVE-2020-26137 ] Published: Feb 10, 2020, 12:00:00 AM UTC
python-urllib3: CVE-2020-26137
Medium(6.5) Desconhecido A associação de pacotes está em andamento. Observado: Oct 23, 2026, 5:49:57 PM UTC
Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.25.9-1
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.25.9-1
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.25.9-1
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.25.9-1
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
[CVE-2019-11324 ] Published: Apr 17, 2019, 12:00:00 AM UTC
python-urllib3: CVE-2019-11324
High(7.5) Desconhecido A associação de pacotes está em andamento. Observado: Oct 23, 2026, 5:38:41 PM UTC
Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.25.6-4
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.25.6-4
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.25.6-4
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.25.6-4
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
[CVE-2019-11236 ] Published: Mar 13, 2019, 12:00:00 AM UTC
python-urllib3: CVE-2019-11236
Medium(6.5) Desconhecido A associação de pacotes está em andamento. Observado: Oct 23, 2026, 5:38:39 PM UTC
Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.25.6-4
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm
Corrigida · Corrigida: 1.25.6-4
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.25.6-4
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
1.26.12-1+deb12u4 · all · bookworm-security
Corrigida · Corrigida: 1.25.6-4
dsa · python-urllib3 · debian · bookworm; dsa · python-urllib3 · debian · 12
[CVE-2016-9015 ] Published: Jan 21, 2019, 2:54:30 PM UTC
python-urllib3: CVE-2016-9015
Low(3.7) Desconhecido A associação de pacotes está em andamento. Observado: Oct 23, 2026, 5:23:37 PM UTC
Detalhes (4) 1.26.12-1+deb12u4 · all · bookworm
Não afetada
dsa · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm
Não afetada
dsa · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm-security
Não afetada
dsa · python-urllib3 · debian · bookworm
1.26.12-1+deb12u4 · all · bookworm-security
Não afetada
dsa · python-urllib3 · debian · bookworm