Vulnerabilities in urlib3 software