Количество 18
Количество 18
CVE-2026-97689
urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigger is that a malicious server returns Transfer-Encoding: chunked followed by a very long run of bytes without a newline. The attack mechanism is that a malicious HTTP server sends a very long unterminated chunk-size line. The impact is that unbounded memory allocation can exhaust the client process. This issue is fixed in version 2.8.0.
CVE-2026-97689
urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigger is that a malicious server returns Transfer-Encoding: chunked followed by a very long run of bytes without a newline. The attack mechanism is that a malicious HTTP server sends a very long unterminated chunk-size line. The impact is that unbounded memory allocation can exhaust the client process. This issue is fixed in version 2.8.0.
CVE-2026-97689
urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigger is that a malicious server returns Transfer-Encoding: chunked followed by a very long run of bytes without a newline. The attack mechanism is that a malicious HTTP server sends a very long unterminated chunk-size line. The impact is that unbounded memory allocation can exhaust the client process. This issue is fixed in version 2.8.0.
CVE-2026-97689
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
CVE-2026-97689
urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, ...
GHSA-vxq7-64xx-v4gw
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
SUSE-SU-2026:4650-1
Security update for python-urllib3
SUSE-SU-2026:4649-1
Security update for python-urllib3
RLSA-2026:85929
Important: python3.12-urllib3 security update
RLSA-2026:84578
Important: python3.14-urllib3 security update
RLSA-2026:84577
Important: python3.14-urllib3 security update
ELSA-2026-85930
ELSA-2026-85930: python-urllib3 security update (IMPORTANT)
ELSA-2026-85929
ELSA-2026-85929: python3.12-urllib3 security update (IMPORTANT)
ELSA-2026-84578
ELSA-2026-84578: python3.14-urllib3 security update (IMPORTANT)
ELSA-2026-84577
ELSA-2026-84577: python3.14-urllib3 security update (IMPORTANT)
openSUSE-SU-2026:22071-1
Security update for python-urllib3
SUSE-SU-2026:4704-1
Security update for python-urllib3
ALT-PU-2026-18631
ALT-PU-2026-18631: package `python3-module-urllib3` update to version 2.8.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-97689 urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigger is that a malicious server returns Transfer-Encoding: chunked followed by a very long run of bytes without a newline. The attack mechanism is that a malicious HTTP server sends a very long unterminated chunk-size line. The impact is that unbounded memory allocation can exhaust the client process. This issue is fixed in version 2.8.0. | CVSS3: 7.5 | 0% Низкий | 27 дней назад |
 | CVE-2026-97689 urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigger is that a malicious server returns Transfer-Encoding: chunked followed by a very long run of bytes without a newline. The attack mechanism is that a malicious HTTP server sends a very long unterminated chunk-size line. The impact is that unbounded memory allocation can exhaust the client process. This issue is fixed in version 2.8.0. | CVSS3: 7.5 | 0% Низкий | 27 дней назад |
 | CVE-2026-97689 urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigger is that a malicious server returns Transfer-Encoding: chunked followed by a very long run of bytes without a newline. The attack mechanism is that a malicious HTTP server sends a very long unterminated chunk-size line. The impact is that unbounded memory allocation can exhaust the client process. This issue is fixed in version 2.8.0. | CVSS3: 7.5 | 0% Низкий | 27 дней назад |
 | CVE-2026-97689 urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory | 0% Низкий | 16 дней назад | |
| CVE-2026-97689 urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, ... | CVSS3: 7.5 | 0% Низкий | 27 дней назад |
| GHSA-vxq7-64xx-v4gw urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory | 0% Низкий | 26 дней назад | |
 | SUSE-SU-2026:4650-1 Security update for python-urllib3 | 13 дней назад | ||
| SUSE-SU-2026:4649-1 Security update for python-urllib3 | 13 дней назад | ||
 | RLSA-2026:85929 Important: python3.12-urllib3 security update | 5 дней назад | ||
| RLSA-2026:84578 Important: python3.14-urllib3 security update | 6 дней назад | ||
| RLSA-2026:84577 Important: python3.14-urllib3 security update | 6 дней назад | ||
| ELSA-2026-85930 ELSA-2026-85930: python-urllib3 security update (IMPORTANT) | 7 дней назад | ||
| ELSA-2026-85929 ELSA-2026-85929: python3.12-urllib3 security update (IMPORTANT) | 7 дней назад | ||
| ELSA-2026-84578 ELSA-2026-84578: python3.14-urllib3 security update (IMPORTANT) | 8 дней назад | ||
| ELSA-2026-84577 ELSA-2026-84577: python3.14-urllib3 security update (IMPORTANT) | 8 дней назад | ||
| openSUSE-SU-2026:22071-1 Security update for python-urllib3 | 17 дней назад | ||
| SUSE-SU-2026:4704-1 Security update for python-urllib3 | 10 дней назад | ||
| ALT-PU-2026-18631 ALT-PU-2026-18631: package `python3-module-urllib3` update to version 2.8.0-alt1 | CVSS3: 8.1 | 25 дней назад |
Уязвимостей на страницу