Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-44431

Опубликовано: 16 мая 2026
Источник: msrc
EPSS Низкий

Описание

urllib3: Sensitive headers forwarded across origins in proxied low-level redirects

EPSS

Процентиль: 41%
0.00527
Низкий

Связанные уязвимости

CVSS3: 5.3
ubuntu
3 месяца назад

urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.

CVSS3: 5.9
redhat
3 месяца назад

urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.

CVSS3: 5.3
nvd
3 месяца назад

urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.

CVSS3: 5.3
debian
3 месяца назад

urllib3 is an HTTP client library for Python. From 1.23 to before 2.7. ...

suse-cvrf
около 2 месяцев назад

Security update for python-urllib3_1

EPSS

Процентиль: 41%
0.00527
Низкий