Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
urllib3 urllib3 streaming API improperly handles highly compressed data High Risk 8.0 9 months ago 3 days ago
urllib3 urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API High Risk 7.5 4 months ago 18 days ago
urllib3 urllib3 allows an unbounded number of links in the decompression chain High Risk 8.0 9 months ago 18 days ago
urllib3 urllib3: Sensitive headers forwarded across origins in proxied low-level redirects Medium Risk 5.3 4 months ago 18 days ago
urllib3 Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API) High Risk 7.5 8 months ago 18 days ago
urllib3 urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation Medium Risk 5.3 1 year ago 18 days ago
urllib3 urllib3 does not control redirects in browsers and Node.js Medium Risk 5.3 1 year ago 18 days ago
urllib3 urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects Medium Risk 4.4 2 years ago 18 days ago
urllib3 urllib3's request body not stripped after redirect from 303 status changes request method to GET Medium Risk 4.2 2 years ago 18 days ago
urllib3 `Cookie` HTTP header isn't stripped on cross-origin redirects Medium Risk 5.9 2 years ago 18 days ago
urllib3 Using default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connection Medium Risk 6.5 5 years ago 2 months ago
urllib3 Catastrophic backtracking in URL authority parser when passed URL containing many @ characters High Risk 7.5 5 years ago 2 months ago
urllib3 urllib3 streaming API improperly handles highly compressed data Unknown 2 months ago 2 months ago
urllib3 urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects Medium Risk 4.4 2 months ago 2 months ago
urllib3 Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API) High Risk 7.5 2 months ago 2 months ago
urllib3 urllib3 does not control redirects in browsers and Node.js Medium Risk 5.3 2 months ago 2 months ago
urllib3 urllib3 allows an unbounded number of links in the decompression chain Unknown 2 months ago 2 months ago
urllib3 urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation Medium Risk 5.3 2 months ago 2 months ago
urllib3 No summary available Unknown 9 years ago 3 months ago
urllib3 No summary available Medium Risk 6.1 2 years ago 3 months ago
urllib3 No summary available Unknown 5 years ago 3 months ago
urllib3 No summary available High Risk 7.5 4 months ago 4 months ago
urllib3 No summary available Medium Risk 5.3 4 months ago 4 months ago
urllib3 Exposure of Sensitive Information to an Unauthorized Actor in urllib3 Critical 9.8 7 years ago 1 year ago
urllib3 Authorization Header forwarded on redirect Medium Risk 6.1 2 years ago 1 year ago
urllib3 Urllib3 Incorrect Certificate Validation Low Risk 3.7 4 years ago 1 year ago
urllib3 Improper Neutralization of CRLF Sequences in urllib3 library for Python Medium Risk 6.1 4 years ago 1 year ago
urllib3 CRLF injection in urllib3 Medium Risk 6.5 5 years ago 1 year ago
urllib3 Uncontrolled Resource Consumption in urllib3 High Risk 7.5 5 years ago 1 year ago
urllib3 Improper Certificate Validation in urllib3 High Risk 7.5 7 years ago 1 year ago
urllib33 Malicious code in urllib33 (PyPI) Unknown 2 years ago 1 year ago
urllib3 No summary available Medium Risk 4.2 2 years ago 2 years ago
urllib3 No summary available High Risk 8.1 2 years ago 2 years ago
urllib3 No summary available Unknown 5 years ago 2 years ago
urllib3 No summary available Unknown 6 years ago 2 years ago
urllib3 No summary available Unknown 5 years ago 2 years ago
urllib3 No summary available Unknown 7 years ago 2 years ago
urllib3 No summary available Unknown 7 years ago 2 years ago
urllib3 No summary available Unknown 7 years ago 2 years ago
uurllib3 Malicious code in uurllib3 (PyPI) Unknown 3 years ago 3 years ago