urllib3 has 3 CVEs on record between 2021 and 2023. The median CVSS is 5.9 (medium).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.9
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Products
- urllib3 3
3
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2023-43804Medium· 5.9`Cookie` HTTP header isn't stripped on cross-origin redirects45CVE-2021-33503High· 7.5An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the a…42CVE-2023-45803Medium· 4.2urllib3's request body not stripped after redirect from 303 status changes request method to GET23
urllib3 vulnerabilities
CVEs affecting urllib3, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2023-45803Medium· 4.2urllib3's request body not stripped after redirect from 303 status changes request method to GET
urllib3's request body not stripped after redirect from 303 status changes request method to GET
▾ Sunliturllib3 · urllib3EPSS 0.59%via OSV
CVE-2023-43804Medium· 5.9PoC`Cookie` HTTP header isn't stripped on cross-origin redirects
`Cookie` HTTP header isn't stripped on cross-origin redirects
▾ Twilighturllib3 · urllib3EPSS 1.4%via OSV
CVE-2021-33503High· 7.5An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the a…
An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL…
▾ Twilighturllib3 · urllib3EPSS 3.3%via OSV