py3-urllib3 vulnerabilities (Alpaquita)
13 vulnerabilities.
py3-urllib3Alpaquitaurllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory8.9 Highpy3-urllib3Alpaquitaurllib3: Chunked Deflate streaming can enter an infinite loop6.9 Mediumpy3-urllib3Alpaquitaurllib3: HTTPS proxy TLS configuration may be ignored or overridden7.6 Highpy3-urllib3Alpaquitaurllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in its streaming API (...7.5 Highpy3-urllib3Alpaquitaurllib3: Decompression-bomb safeguards bypassed in parts of the streaming API8.9 Highpy3-urllib3Alpaquitaurllib3: Sensitive headers forwarded across origins in proxied low-level redirects8.2 Highpy3-urllib3Alpaquitaurllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)8.9 Highpy3-urllib3Alpaquitaurllib3 Streaming API improperly handles highly compressed data8.9 Highpy3-urllib3Alpaquitaurllib3 allows an unbounded number of links in the decompression chain8.9 Highpy3-urllib3Alpaquitaurllib3 does not control redirects in browsers and Node.js5.3 Mediumpy3-urllib3Alpaquitaurllib3 redirects are not disabled when retries are disabled on PoolManager instantiation5.3 Mediumpy3-urllib3AlpaquitaRequest body not stripped after redirect in urllib34.2 Mediumpy3-urllib3Alpaquita`Cookie` HTTP header isn't stripped on cross-origin redirects5.9 Medium