Количество 26
Количество 26
CVE-2026-44431
urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.
CVE-2026-44431
urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.
CVE-2026-44431
urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.
CVE-2026-44431
urllib3: Sensitive headers forwarded across origins in proxied low-level redirects
CVE-2026-44431
urllib3 is an HTTP client library for Python. From 1.23 to before 2.7. ...
openSUSE-SU-2026:20871-1
Security update for python-urllib3_1
openSUSE-SU-2026:20861-1
Security update for python-urllib3
SUSE-SU-2026:2486-1
Security update for python-urllib3
SUSE-SU-2026:2119-1
Security update for python-urllib3
SUSE-SU-2026:2067-1
Security update for python-urllib3_1
SUSE-SU-2026:2065-1
Security update for python-urllib3
GHSA-qccp-gfcp-xxvc
urllib3: Sensitive headers forwarded across origins in proxied low-level redirects
ELSA-2026-36732
ELSA-2026-36732: python-urllib3 security update (MODERATE)
BDU:2026-09265
Уязвимость метода HTTPConnection.urlopen() HTTP библиотеки Urllib3 языка программирования Python, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
RLSA-2026:32992
Important: python3.12-urllib3 security update
RLSA-2026:28159
Important: python3.12-urllib3 security update
RLSA-2026:28158
Important: python-urllib3 security update
RLSA-2026:28157
Important: python3.14-urllib3 security update
RLSA-2026:28000
Important: python-urllib3 security update
RLSA-2026:27929
Important: python3.14-urllib3 security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-44431 urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0. | CVSS3: 5.3 | 1% Низкий | 3 месяца назад |
 | CVE-2026-44431 urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0. | CVSS3: 5.9 | 1% Низкий | 3 месяца назад |
 | CVE-2026-44431 urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0. | CVSS3: 5.3 | 1% Низкий | 3 месяца назад |
 | CVE-2026-44431 urllib3: Sensitive headers forwarded across origins in proxied low-level redirects | 1% Низкий | 3 месяца назад | |
| CVE-2026-44431 urllib3 is an HTTP client library for Python. From 1.23 to before 2.7. ... | CVSS3: 5.3 | 1% Низкий | 3 месяца назад |
 | openSUSE-SU-2026:20871-1 Security update for python-urllib3_1 | 1% Низкий | около 2 месяцев назад | |
| openSUSE-SU-2026:20861-1 Security update for python-urllib3 | 1% Низкий | 2 месяца назад | |
| SUSE-SU-2026:2486-1 Security update for python-urllib3 | 1% Низкий | около 1 месяца назад | |
| SUSE-SU-2026:2119-1 Security update for python-urllib3 | 1% Низкий | 2 месяца назад | |
| SUSE-SU-2026:2067-1 Security update for python-urllib3_1 | 1% Низкий | 2 месяца назад | |
| SUSE-SU-2026:2065-1 Security update for python-urllib3 | 1% Низкий | 2 месяца назад | |
| GHSA-qccp-gfcp-xxvc urllib3: Sensitive headers forwarded across origins in proxied low-level redirects | CVSS3: 5.3 | 1% Низкий | 3 месяца назад |
| ELSA-2026-36732 ELSA-2026-36732: python-urllib3 security update (MODERATE) | 24 дня назад | ||
 | BDU:2026-09265 Уязвимость метода HTTPConnection.urlopen() HTTP библиотеки Urllib3 языка программирования Python, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 5.3 | 1% Низкий | 3 месяца назад |
 | RLSA-2026:32992 Important: python3.12-urllib3 security update | около 1 месяца назад | ||
| RLSA-2026:28159 Important: python3.12-urllib3 security update | около 1 месяца назад | ||
| RLSA-2026:28158 Important: python-urllib3 security update | около 1 месяца назад | ||
| RLSA-2026:28157 Important: python3.14-urllib3 security update | около 1 месяца назад | ||
| RLSA-2026:28000 Important: python-urllib3 security update | около 1 месяца назад | ||
| RLSA-2026:27929 Important: python3.14-urllib3 security update | около 1 месяца назад |
Уязвимостей на страницу