Known vulnerabilities in python-urllib3

Vendor: SUSE
Software: python-urllib3
Software CPE: cpe:2.3:o:suse:python-urllib3:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 11
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting python-urllib3 python-urllib3 is affected by 11 known vulnerabilities: 8 medium, 3 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130907 - Exposure of sensitive information to an unauthorized actor
CVE-2026-44431		 CWE-200 Medium
No
No
 1.25.10-3.51.1 09.05.2026 SB20260509126
SB2026051588
SB2026051589
and 43 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441		 CWE-409 Medium
No
No
 1.25.10-3.48.4 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 90 more
#VU119231 - Resource exhaustion
CVE-2025-66471		 CWE-400 Medium
No
No
 1.25.10-3.48.4 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 89 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 1.25.10-3.48.4 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 94 more
#VU111979 - Protection Mechanism Failure
CVE-2025-50181		 CWE-693 Low
No
No
 1.25.10-3.43.1 26.06.2025 SB2025062659
SB2025062660
SB2025062662
and 55 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 1.25.10-3.40.1 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 194 more
#VU82979 - Exposure of sensitive information to an unauthorized actor
CVE-2018-25091		 CWE-200 Medium
No
No
 1.23-3.25.1 10.11.2023 SB2023111039
SB2023111040
SB2023111048
and 13 more
#VU82978 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45803		 CWE-200 Medium
No
No
 1.23-3.25.1, 1.25.10-3.37.1, 1.25.10-5.25.1 10.11.2023 SB2023111038
SB2023111040
SB2023111048
and 122 more
#VU81322 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43804		 CWE-200 Low
Available
No
 1.23-3.25.1, 1.25.10-3.34.1, 1.25.10-5.22.1 02.10.2023 SB2023100251
SB2023100259
SB2023100260
and 112 more
#VU54077 - Resource exhaustion
CVE-2021-33503		 CWE-400 Medium
No
No
 1.25.10-5.19.1 13.06.2021 SB2021061304
SB2021061305
SB2021071501
and 36 more
#VU47403 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-26137		 CWE-93 Medium
No
No
 1.25.10-3.31.2 30.09.2020 SB2020100716
SB2020121420
SB2021052028
and 35 more