Known vulnerabilities in python3.11-urllib3 (Red Hat package)
Vendor:
Red Hat Inc.
Software:
python3.11-urllib3 (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:python3_11-urllib3_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
10
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (10)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU121072 - Improper Handling of Highly Compressed Data (Data Amplification) CVE-2026-21441 |
CWE-409 | Medium | 1.26.12-1.el8_8.3, 1.26.12-1.el9_2.2, 1.26.12-2.el9_4.3, 1.26.12-5.el9_6.1, 1.26.12-5.el9_7.1, 1.26.12-6.el8_10 | 07.01.2026 |
SB2026010780 SB2026011269 SB2026011328 and 89 more |
||
| #VU120990 - Improper Handling of Highly Compressed Data (Data Amplification) CVE-2025-69223 |
CWE-409 | Medium | 2.6.3-1.el8ap, 2.6.3-1.el9ap | 06.01.2026 |
SB2026010643 SB2026012661 SB2026012855 and 15 more |
||
| #VU119235 - Resource exhaustion CVE-2025-61729 |
CWE-400 | Medium | 2.6.3-1.el8ap, 2.6.3-1.el9ap | 06.12.2025 |
SB2025120604 SB20251210172 SB20251210173 and 146 more |
||
| #VU119231 - Resource exhaustion CVE-2025-66471 |
CWE-400 | Medium | 1.26.12-1.el8_8.3, 1.26.12-1.el9_2.2, 1.26.12-2.el9_4.3, 1.26.12-5.el9_6.1, 1.26.12-5.el9_7.1, 1.26.12-6.el8_10, 2.6.3-1.el8ap, 2.6.3-1.el9ap | 05.12.2025 |
SB2025120581 SB2025121208 SB2026011313 and 88 more |
||
| #VU119230 - Allocation of Resources Without Limits or Throttling CVE-2025-66418 |
CWE-770 | Medium | 1.26.12-1.el8_8.3, 1.26.12-1.el9_2.2, 1.26.12-2.el9_4.3, 1.26.12-5.el9_6.1, 1.26.12-5.el9_7.1, 1.26.12-6.el8_10 | 05.12.2025 |
SB2025120581 SB2025121208 SB2025121938 and 93 more |
||
| #VU119043 - Resource Management Errors CVE-2025-64460 |
CWE-399 | Medium | 2.6.3-1.el8ap, 2.6.3-1.el9ap | 02.12.2025 |
SB2025120234 SB2025120237 SB2025120561 and 13 more |
||
| #VU116913 - Reachable Assertion CVE-2025-59530 |
CWE-617 | Medium | 1.26.20-1.el8ap, 1.26.20-1.el9ap | 13.10.2025 |
SB2025101341 SB2025111857 SB2025111935 and 3 more |
||
| #VU113069 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-53643 |
CWE-444 | Medium | 2.6.3-1.el8ap, 2.6.3-1.el9ap | 18.07.2025 |
SB2025071857 SB2025090377 SB2025091303 and 15 more |
||
| #VU112882 - Uncontrolled Recursion CVE-2025-4565 |
CWE-674 | Medium | 2.6.3-1.el9ap | 14.07.2025 |
SB2025071429 SB2025071430 SB2025071431 and 21 more |
||
| #VU82978 - Exposure of sensitive information to an unauthorized actor CVE-2023-45803 |
CWE-200 | Medium | 1.26.12-1.el9_2.1, 1.26.12-2.el9_4.2 | 10.11.2023 |
SB2023111038 SB2023111040 SB2023111048 and 122 more |