python-urllib3 vulnerabilities (Azure Linux)
12 vulnerabilities.
-
python-urllib3Azure Linux urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory 8.9 High -
python-urllib3Azure Linux urllib3: HTTPS proxy TLS configuration may be ignored or overridden 7.6 High -
python-urllib3Azure Linux urllib: Cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage 7.5 High -
python-urllib3Azure Linux urllib3: Sensitive headers forwarded across origins in proxied low-level redirects 8.2 High -
python-urllib3Azure Linux urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) 8.9 High -
python-urllib3Azure Linux urllib3 Streaming API improperly handles highly compressed data 8.9 High -
python-urllib3Azure Linux urllib3 allows an unbounded number of links in the decompression chain 8.9 High -
python-urllib3Azure Linux urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation 5.3 Medium -
python-urllib3Azure Linux Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3 4.4 Medium -
python-urllib3Azure Linux Request body not stripped after redirect in urllib3 4.2 Medium -
python-urllib3Azure Linux `Cookie` HTTP header isn't stripped on cross-origin redirects 5.9 Medium -
python-urllib3Azure Linux Catastrophic backtracking in URL authority parser when passed URL containing many @ characters 7.5 High