python-urllib3 vulnerabilities (Mageia)
11 vulnerabilities.
-
python-urllib3Mageia urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) 8.9 High -
python-urllib3Mageia urllib3 allows an unbounded number of links in the decompression chain 8.9 High -
python-urllib3Mageia urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation 5.3 Medium -
python-urllib3Mageia Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3 4.4 Medium -
python-urllib3Mageia Catastrophic backtracking in URL authority parser when passed URL containing many @ characters 7.5 High -
python-urllib3Mageia Using default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connection 6.5 Medium -
python-urllib3Mageia CRLF injection in urllib3 6.5 Medium -
python-urllib3Mageia Improper Certificate Validation in urllib3 7.5 High -
python-urllib3Mageia Improper Neutralization of CRLF Sequences in urllib3 library for Python 6.1 Medium -
python-urllib3Mageia Exposure of Sensitive Information to an Unauthorized Actor in urllib3 9.8 Critical -
python-urllib3Mageia Updated python3 and related packages fix security vulnerabilities and prevent an error No score