python-urllib3 vulnerabilities (openSUSE)
21 vulnerabilities.
-
python-urllib3openSUSE urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory 8.9 High -
python-urllib3openSUSE urllib3: Chunked Deflate streaming can enter an infinite loop 6.9 Medium -
python-urllib3openSUSE urllib3: HTTPS proxy TLS configuration may be ignored or overridden 7.6 High -
python-urllib3openSUSE urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in its streaming API (... 7.5 High -
python-urllib3openSUSE urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API 8.9 High -
python-urllib3openSUSE urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) 8.9 High -
python-urllib3openSUSE urllib3 Streaming API improperly handles highly compressed data 8.9 High -
python-urllib3openSUSE urllib3 allows an unbounded number of links in the decompression chain 8.9 High -
python-urllib3openSUSE urllib3 does not control redirects in browsers and Node.js 5.3 Medium -
python-urllib3openSUSE urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation 5.3 Medium -
python-urllib3openSUSE Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3 4.4 Medium -
python-urllib3openSUSE Request body not stripped after redirect in urllib3 4.2 Medium -
python-urllib3openSUSE `Cookie` HTTP header isn't stripped on cross-origin redirects 5.9 Medium -
python-urllib3openSUSE Parser contains an inefficient regular expression in sqlparse 5.5 Medium -
python-urllib3openSUSE Catastrophic backtracking in URL authority parser when passed URL containing many @ characters 7.5 High -
python-urllib3openSUSE CRLF injection in urllib3 6.5 Medium -
python-urllib3openSUSE Improper Certificate Validation in urllib3 7.5 High -
python-urllib3openSUSE Improper Neutralization of CRLF Sequences in urllib3 library for Python 6.1 Medium -
python-urllib3openSUSE An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through... 6.1 Medium -
python-urllib3openSUSE Exposure of Sensitive Information to an Unauthorized Actor in urllib3 9.8 Critical -
python-urllib3openSUSE Urllib3 Incorrect Certificate Validation 3.7 Low