Known vulnerabilities in python-urllib3 (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
python-urllib3 (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:python-urllib3_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
12
Public exploits:
1
Known exploited (KEV):
0
Breakdown by Severity Chart
1.13.1-2ubuntu0.16.04.4+esm4
1.22-1ubuntu0.18.04.2+esm4
1.25.8-2ubuntu0.4+esm5
1.26.5-1~exp1ubuntu0.7
2.0.7-1ubuntu0.7
2.3.0-3ubuntu0.6
2.6.3-1ubuntu1.1
1.25.8-2ubuntu0.4+esm4
1.26.5-1~exp1ubuntu0.6
2.0.7-1ubuntu0.6
2.3.0-2ubuntu0.5
2.3.0-3ubuntu0.4
2.0.7-1ubuntu0.5
2.3.0-2ubuntu0.4
2.3.0-3ubuntu0.3
1.25.8-2ubuntu0.4+esm3
1.26.5-1~exp1ubuntu0.5
2.0.7-1ubuntu0.4
2.3.0-2ubuntu0.3
2.3.0-3ubuntu0.2
1.25.8-2ubuntu0.4+esm2
1.26.5-1~exp1ubuntu0.4
2.0.7-1ubuntu0.3
2.3.0-2ubuntu0.2
2.3.0-3ubuntu0.1
2.3.0-3
2.3.0-2ubuntu1
2.3.0-2
2.3.0-1
2.2.3-4
2.2.3-1
2.2.3-2
2.2.3-3
2.0.7-2ubuntu0.1
1.26.18-2
2.0.7-2
2.0.7-1ubuntu0.1
2.0.7-1
1.26.17-1
1.26.18-1
1.26.16-1ubuntu0.1
1.26.16-1
1.26.12-1ubuntu0.1
1.26.12-1
1.26.8-1
1.26.9-1
1.26.5-1~exp1ubuntu0.2
1.26.5-1~exp1ubuntu0.1
1.26.5-1~exp1
1.26.4-1
1.26.2-1ubuntu1
1.26.2-1
1.25.11-1
1.25.8-2ubuntu0.4
1.25.8-2ubuntu0.3
1.25.8-2ubuntu0.2
1.25.8-2ubuntu0.1
1.25.6-1
1.25.6-2
1.25.6-3
1.25.6-4
1.25.6-5
1.25.8-1
1.13.1-2ubuntu0.16.04.4+esm3
1.22-1ubuntu0.18.04.2+esm3
1.25.8-2ubuntu0.4+esm1
1.26.5-1~exp1ubuntu0.3
2.0.7-1ubuntu0.2
2.0.7-2ubuntu0.2
2.3.0-2ubuntu0.1
Ubuntu Pro
1.22-1ubuntu0.18.04.2
1.13.1-2ubuntu0.16.04.4
1.25.9
1.25.9-1
1.25.8
1.25.8-2
1.24.1
1.22
1.13.1
1.7.1
1.24.1-1ubuntu2
1.24.1-1ubuntu1
1.24.1-1ubuntu0.1
1.22-1ubuntu0.18.10.1
1.22-1ubuntu0.18.04.1
1.13.1-2ubuntu0.16.04.3
1.24.1-1~exp1
1.24.1-1
1.24-1~exp1
1.24-1
1.22-1
1.21.1-1
1.13.1-2ubuntu0.16.04.2
1.7.1-1ubuntu4.1
1.7.1-1ubuntu4
1.7.1-1ubuntu3
1.7.1-1build1
1.7.1-1ubuntu0.1
1.19.1-1
1.16-1
1.15.1-1
1.15.1-2
1.13.1-2ubuntu1
1.13.1-2ubuntu0.16.04.1
1.13.1-2
1.13.1-1
1.11-2
1.12-1
1.11-1
1.2.2-1
1.3-1
1.3-2
1.3-3
1.5-1
1.6-1
1.6-2
1.7.1-1
1.8-1
1.8-2
1.8.2-1
1.8.3-1
1.9-1
1.9.1-1
1.9.1-2
1.9.1-3
1.10-1
1.10.4-1
Vulnerabilities (12)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU130907 - Exposure of sensitive information to an unauthorized actor CVE-2026-44431 |
CWE-200 | Medium | 1.13.1-2ubuntu0.16.04.4+esm4, 1.22-1ubuntu0.18.04.2+esm4, 1.25.8-2ubuntu0.4+esm5, 1.26.5-1~exp1ubuntu0.7, 2.0.7-1ubuntu0.7, 2.3.0-3ubuntu0.6, 2.6.3-1ubuntu1.1 | 09.05.2026 |
SB20260509126 SB2026051588 SB2026051589 and 43 more |
||
| #VU130906 - Improper Handling of Highly Compressed Data (Data Amplification) CVE-2026-44432 |
CWE-409 | Medium | 1.26.5-1~exp1ubuntu0.7, 2.0.7-1ubuntu0.7, 2.3.0-3ubuntu0.6, 2.6.3-1ubuntu1.1 | 09.05.2026 |
SB20260509126 SB2026052935 SB2026060609 and 17 more |
||
| #VU121072 - Improper Handling of Highly Compressed Data (Data Amplification) CVE-2026-21441 |
CWE-409 | Medium | 1.25.8-2ubuntu0.4+esm3, 1.25.8-2ubuntu0.4+esm4, 1.26.5-1~exp1ubuntu0.5, 1.26.5-1~exp1ubuntu0.6, 2.0.7-1ubuntu0.4, 2.3.0-2ubuntu0.3, 2.3.0-3ubuntu0.2 | 07.01.2026 |
SB2026010780 SB2026011269 SB2026011328 and 90 more |
||
| #VU119231 - Resource exhaustion CVE-2025-66471 |
CWE-400 | Medium | 1.25.8-2ubuntu0.4+esm2, 1.26.5-1~exp1ubuntu0.4, 2.0.7-1ubuntu0.3, 2.0.7-1ubuntu0.5, 2.0.7-1ubuntu0.6, 2.3.0-2ubuntu0.2, 2.3.0-2ubuntu0.4, 2.3.0-2ubuntu0.5, 2.3.0-3ubuntu0.1, 2.3.0-3ubuntu0.3, 2.3.0-3ubuntu0.4 | 05.12.2025 |
SB2025120581 SB2025121208 SB2026011313 and 89 more |
||
| #VU119230 - Allocation of Resources Without Limits or Throttling CVE-2025-66418 |
CWE-770 | Medium | 1.25.8-2ubuntu0.4+esm2, 1.26.5-1~exp1ubuntu0.4, 2.0.7-1ubuntu0.3, 2.0.7-1ubuntu0.5, 2.0.7-1ubuntu0.6, 2.3.0-2ubuntu0.2, 2.3.0-2ubuntu0.4, 2.3.0-2ubuntu0.5, 2.3.0-3ubuntu0.1, 2.3.0-3ubuntu0.3, 2.3.0-3ubuntu0.4 | 05.12.2025 |
SB2025120581 SB2025121208 SB2025121938 and 94 more |
||
| #VU111980 - Protection Mechanism Failure CVE-2025-50182 |
CWE-693 | Low | 1.13.1-2ubuntu0.16.04.4+esm3, 1.22-1ubuntu0.18.04.2+esm3, 1.25.8-2ubuntu0.4+esm1, 1.26.5-1~exp1ubuntu0.3, 2.0.7-1ubuntu0.2, 2.0.7-2ubuntu0.2, 2.3.0-2ubuntu0.1 | 26.06.2025 |
SB2025062659 SB2025062660 SB2025062662 and 21 more |
||
| #VU111979 - Protection Mechanism Failure CVE-2025-50181 |
CWE-693 | Low | 1.13.1-2ubuntu0.16.04.4+esm3, 1.22-1ubuntu0.18.04.2+esm3, 1.25.8-2ubuntu0.4+esm1, 1.26.5-1~exp1ubuntu0.3, 2.0.7-1ubuntu0.2, 2.0.7-2ubuntu0.2, 2.3.0-2ubuntu0.1 | 26.06.2025 |
SB2025062659 SB2025062660 SB2025062662 and 55 more |
||
| #VU92262 - Exposure of sensitive information to an unauthorized actor CVE-2024-37891 |
CWE-200 | Low | Ubuntu Pro | 19.06.2024 |
SB2024061955 SB20240625146 SB2024062605 and 194 more |
||
| #VU82979 - Exposure of sensitive information to an unauthorized actor CVE-2018-25091 |
CWE-200 | Medium | Ubuntu Pro | 10.11.2023 |
SB2023111039 SB2023111040 SB2023111048 and 13 more |
||
| #VU82978 - Exposure of sensitive information to an unauthorized actor CVE-2023-45803 |
CWE-200 | Medium | Ubuntu Pro | 10.11.2023 |
SB2023111038 SB2023111040 SB2023111048 and 122 more |
||
| #VU81322 - Exposure of sensitive information to an unauthorized actor CVE-2023-43804 |
CWE-200 | Low | Ubuntu Pro | 02.10.2023 |
SB2023100251 SB2023100259 SB2023100260 and 112 more |
||
| #VU47403 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2020-26137 |
CWE-93 | Medium | 1.13.1-2ubuntu0.16.04.4, 1.22-1ubuntu0.18.04.2 | 30.09.2020 |
SB2020100716 SB2020121420 SB2021052028 and 35 more |