Known vulnerabilities in python3-urllib3
Vendor:
SUSE
Software:
python3-urllib3
Software CPE:
cpe:2.3:o:suse:python3-urllib3:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
10
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
1.25.10-150300.4.30.1
1.25.10-150300.4.27.1
1.25.10-3.51.1
1.25.10-3.48.4
1.25.10-150300.4.24.1
1.25.10-150300.4.21.1
1.25.10-150300.4.18.1
1.25.10-3.43.1
1.25.10-150300.4.15.1
1.25.10-3.40.1
1.25.10-150300.4.12.1
1.25.10-150300.4.9.1
1.25.10-3.37.1
1.25.10-150300.4.6.1
1.25.10-3.34.1
1.25.10-3.31.2
1.25.10-9.14.1
1.25.10-4.3.1
Vulnerabilities (10)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU130907 - Exposure of sensitive information to an unauthorized actor CVE-2026-44431 |
CWE-200 | Medium | 1.25.10-3.51.1, 1.25.10-150300.4.27.1 | 09.05.2026 |
SB20260509126 SB2026051588 SB2026051589 and 43 more |
||
| #VU121072 - Improper Handling of Highly Compressed Data (Data Amplification) CVE-2026-21441 |
CWE-409 | Medium | 1.25.10-3.48.4, 1.25.10-150300.4.21.1 | 07.01.2026 |
SB2026010780 SB2026011269 SB2026011328 and 90 more |
||
| #VU119231 - Resource exhaustion CVE-2025-66471 |
CWE-400 | Medium | 1.25.10-3.48.4, 1.25.10-150300.4.21.1, 1.25.10-150300.4.24.1, 1.25.10-150300.4.30.1 | 05.12.2025 |
SB2025120581 SB2025121208 SB2026011313 and 89 more |
||
| #VU119230 - Allocation of Resources Without Limits or Throttling CVE-2025-66418 |
CWE-770 | Medium | 1.25.10-3.48.4, 1.25.10-150300.4.21.1 | 05.12.2025 |
SB2025120581 SB2025121208 SB2025121938 and 94 more |
||
| #VU111979 - Protection Mechanism Failure CVE-2025-50181 |
CWE-693 | Low | 1.25.10-3.43.1, 1.25.10-150300.4.18.1 | 26.06.2025 |
SB2025062659 SB2025062660 SB2025062662 and 55 more |
||
| #VU92262 - Exposure of sensitive information to an unauthorized actor CVE-2024-37891 |
CWE-200 | Low | 1.25.10-3.40.1, 1.25.10-150300.4.12.1 | 19.06.2024 |
SB2024061955 SB20240625146 SB2024062605 and 194 more |
||
| #VU82978 - Exposure of sensitive information to an unauthorized actor CVE-2023-45803 |
CWE-200 | Medium | 1.25.10-3.37.1, 1.25.10-150300.4.9.1 | 10.11.2023 |
SB2023111038 SB2023111040 SB2023111048 and 122 more |
||
| #VU81322 - Exposure of sensitive information to an unauthorized actor CVE-2023-43804 |
CWE-200 | Low | 1.25.10-3.34.1, 1.25.10-150300.4.6.1 | 02.10.2023 |
SB2023100251 SB2023100259 SB2023100260 and 112 more |
||
| #VU54077 - Resource exhaustion CVE-2021-33503 |
CWE-400 | Medium | 1.25.10-4.3.1 | 13.06.2021 |
SB2021061304 SB2021061305 SB2021071501 and 36 more |
||
| #VU47403 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2020-26137 |
CWE-93 | Medium | 1.25.10-3.31.2, 1.25.10-9.14.1 | 30.09.2020 |
SB2020100716 SB2020121420 SB2021052028 and 35 more |