Количество 5
Количество 5
CVE-2025-66418
urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory allocation for the decompressed data. This vulnerability is fixed in 2.6.0.
CVE-2025-66418
urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory allocation for the decompressed data. This vulnerability is fixed in 2.6.0.
CVE-2025-66418
urllib3 allows an unbounded number of links in the decompression chain
CVE-2025-66418
urllib3 is a user-friendly HTTP client library for Python. Starting in ...
GHSA-gm62-xv2j-4w53
urllib3 allows an unbounded number of links in the decompression chain
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2025-66418 urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory allocation for the decompressed data. This vulnerability is fixed in 2.6.0. | CVSS3: 7.5 | 0% Низкий | 16 дней назад | |
CVE-2025-66418 urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory allocation for the decompressed data. This vulnerability is fixed in 2.6.0. | CVSS3: 7.5 | 0% Низкий | 16 дней назад | |
CVE-2025-66418 urllib3 allows an unbounded number of links in the decompression chain | 0% Низкий | 5 дней назад | ||
CVE-2025-66418 urllib3 is a user-friendly HTTP client library for Python. Starting in ... | CVSS3: 7.5 | 0% Низкий | 16 дней назад | |
GHSA-gm62-xv2j-4w53 urllib3 allows an unbounded number of links in the decompression chain | 0% Низкий | 16 дней назад |
Уязвимостей на страницу