Python Urllib3 vulnerabilities
22 known vulnerabilities affecting python/urllib3.
Total CVEs
22
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH10MEDIUM10LOW1
Vulnerabilities
Page 2 of 2
CVE-2023-45803P4MEDIUMCVSS 4.2fixed in 1.26.18≥ 2.0.0, < 2.0.72023-10-17
CVE-2023-45803 [MEDIUM] CWE-200 CVE-2023-45803: urllib3 is a user-friendly HTTP client library for Python. urllib3 previously wouldn't remove the HT
urllib3 is a user-friendly HTTP client library for Python. urllib3 previously wouldn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303 after the request had its method changed from one that could accept a request body (like `POST`) to `GET` as is required by HTTP RFCs. Although this behavior is not specified
nvd
CVE-2016-9015P4LOWCVSS 3.7v1.17v1.182017-01-11
CVE-2016-9015 [LOW] CWE-295 CVE-2016-9015: Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them
Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates. This places users of the library with those configurations at risk of man-in-the-middle and information leakage attacks. This vulnerability affects users using versions 1.17 and 1.18
nvd
← Previous2 / 2