urllib3 streaming API improperly handles highly compressed data
Modified: 2/4/2026
package
pkg:pypi/urllib3
urllib3 streaming API improperly handles highly compressed data
Modified: 2/4/2026
urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects
Modified: 2/4/2026
Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)
Modified: 2/4/2026
urllib3 does not control redirects in browsers and Node.js
Modified: 2/4/2026
Using default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connection
Modified: 3/13/2026
urllib3's request body not stripped after redirect from 303 status changes request method to GET
Modified: 2/4/2026
urllib3 allows an unbounded number of links in the decompression chain
Modified: 2/4/2026
Authorization Header forwarded on redirect
Modified: 11/18/2024
Uncontrolled Resource Consumption in urllib3
Modified: 11/18/2024
urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API
Modified: 5/20/2026
Improper Certificate Validation in urllib3
Modified: 11/18/2024
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
Modified: 2/4/2026
Catastrophic backtracking in URL authority parser when passed URL containing many @ characters
Modified: 3/13/2026
urllib3: Sensitive headers forwarded across origins in proxied low-level redirects
Modified: 5/20/2026
Improper Neutralization of CRLF Sequences in urllib3 library for Python
Modified: 11/18/2024
Urllib3 Incorrect Certificate Validation
Modified: 11/18/2024
`Cookie` HTTP header isn't stripped on cross-origin redirects
Modified: 2/4/2026
CRLF injection in urllib3
Modified: 11/18/2024
Exposure of Sensitive Information to an Unauthorized Actor in urllib3
Modified: 12/27/2024
Modified: 11/8/2023
Modified: 11/8/2023
Modified: 11/8/2023
Modified: 11/8/2023
Modified: 11/8/2023
Modified: 11/8/2023
Modified: 6/8/2026
Modified: 11/8/2023
Modified: 11/8/2023
Modified: 11/8/2023
Modified: 11/8/2023
Modified: 5/20/2026
Modified: 5/20/2026