urllib3 before 1.25.9 allows CRLF injection if the attacker controls t ...

http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request.

http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request.

http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request.

http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x be ...

Security update for python-lxml

Security update for python-lxml

Security update for python-lxml

Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3

Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3

Security update for python-urllib3

Security update for python-urllib3

Security update for python-urllib3

Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3

Security update for python-urllib3

Moderate: python-urllib3 security update

CRLF injection in urllib3

ELSA-2021-1631: python-urllib3 security update (MODERATE)

Уязвимость модуля urllib3 интерпретатора языка программирования Python, связанная с недостаточной нейтрализацией специальных элементов в запросе, позволяющая нарушителю получить доступ к конфиденциальным данным и нарушить их целостность