An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python38-wcwidthUpgrade python39-psutilUpgrade python39-tomlUpgrade python38-atomicwritesUpgrade python38-numpy-docUpgrade python39-requestsUpgrade python38-pluggyUpgrade python38-scipyUpgrade python38-packagingUpgrade python39-pyUpgrade python39-pysocksUpgrade python39-setuptoolsUpgrade python39-attrsUpgrade python38-pytzUpgrade python38-pyyamlUpgrade python39-plyUpgrade python38-asn1cryptoUpgrade python38-CythonUpgrade python38-sixUpgrade python38-chardetUpgrade python39-wheel-wheelUpgrade python38-pycparserUpgrade python38-pytestUpgrade python39-psycopg2Upgrade python38-PyMySQLUpgrade python39-idnaUpgrade python38-babelUpgrade python39-mod_wsgiUpgrade python39-cffiUpgrade python39-pyparsingUpgrade python39-pytestUpgrade python38-markupsafeUpgrade python38-idnaUpgrade python38-psycopg2-testsUpgrade python38-psycopg2Upgrade python39-CythonUpgrade python38-requestsUpgrade python39-numpy-f2pyUpgrade python38-jinja2Upgrade python38-pysocksUpgrade python38-attrsUpgrade python38-urllib3Upgrade python38-plyUpgrade python39-pyyamlUpgrade python39-urllib3Upgrade python39-sixUpgrade python39-numpy-docUpgrade python39-pycparserUpgrade python39-PyMySQLUpgrade python38-mod_wsgiUpgrade python39-more-itertoolsUpgrade python38-more-itertoolsUpgrade python39-packagingUpgrade python39-psycopg2-docUpgrade python38-cffiUpgrade python38-psycopg2-docUpgrade python38-pyUpgrade python38-wheel-wheelUpgrade python38-setuptools-wheelUpgrade python39-scipyUpgrade python38-setuptoolsUpgrade python39-chardetUpgrade python38-cryptographyUpgrade python38-wheelUpgrade python38-psutilUpgrade python39-setuptools-wheelUpgrade python39-iniconfigUpgrade python39-cryptographyUpgrade python39-wheelUpgrade python39-numpyUpgrade python39-wcwidthUpgrade python38-pyparsingUpgrade python38-numpy-f2pyUpgrade python39-psycopg2-testsUpgrade python38-numpyUpgrade python39-pluggy | May 13, 2022 | Jun 29, 2021 |
| Amazon Linux Ami 2 | — | Upgrade python-urllib3 | Jul 19, 2021 | Jun 29, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 29, 2021 |
| Centos_linux | — | Upgrade python39-sixUpgrade python39-psycopg2-docUpgrade python38-urllib3Upgrade python38-libsUpgrade python38-lxml-debuginfoUpgrade python38-jinja2Upgrade numpy-debugsourceUpgrade python38-setuptools-wheelUpgrade python38-cryptographyUpgrade python38-psycopg2-docUpgrade python38-psycopg2-debuginfoUpgrade python39-idnaUpgrade python-lxml-debugsourceUpgrade python38-debugsourceUpgrade python38-psycopg2-testsUpgrade python39-cryptographyUpgrade python39-mod_wsgiUpgrade python39-scipyUpgrade python39-numpyUpgrade python38-cryptography-debuginfoUpgrade python38-chardetUpgrade python38-babelUpgrade python39-setuptools-wheelUpgrade python38-testUpgrade python38-pip-wheelUpgrade python-psutil-debugsourceUpgrade python39-psycopg2Upgrade python38-idleUpgrade scipy-debugsourceUpgrade python-cffi-debugsourceUpgrade PyYAML-debugsourceUpgrade python39-PyMySQLUpgrade python38-idnaUpgrade python38-scipy-debuginfoUpgrade python38-numpyUpgrade python-psycopg2-debugsourceUpgrade python38-pyyaml-debuginfoUpgrade python39-pyyaml-debuginfoUpgrade python39-urllib3Upgrade python38Upgrade python38-plyUpgrade python38-psutilUpgrade python38-pycparserUpgrade python38-cffiUpgrade python39-pip-wheelUpgrade python38-markupsafeUpgrade python39-lxmlUpgrade python38-numpy-docUpgrade python38-scipyUpgrade python39-numpy-debuginfoUpgrade python39-numpy-f2pyUpgrade python39-tkinterUpgrade python39-lxml-debuginfoUpgrade python39-plyUpgrade python38-numpy-debuginfoUpgrade python-cryptography-debugsourceUpgrade python38-debugUpgrade python38-CythonUpgrade python39-scipy-debuginfoUpgrade python39-psutil-debuginfoUpgrade python39Upgrade python39-develUpgrade python38-pysocksUpgrade python39-libsUpgrade python39-psutilUpgrade python39-tomlUpgrade python39-setuptoolsUpgrade python39-psycopg2-debuginfoUpgrade python39-wheelUpgrade python38-psycopg2Upgrade python38-psutil-debuginfoUpgrade python38-mod_wsgiUpgrade python39-cryptography-debuginfoUpgrade python38-rpm-macrosUpgrade python38-pyyamlUpgrade python39-pycparserUpgrade python39-debuginfoUpgrade python39-chardetUpgrade python38-requestsUpgrade python38-pipUpgrade python38-debuginfoUpgrade python38-Cython-debuginfoUpgrade Cython-debugsourceUpgrade python39-pyyamlUpgrade python39-pysocksUpgrade python38-setuptoolsUpgrade python38-pytzUpgrade python38-develUpgrade python39-cffiUpgrade python38-wheel-wheelUpgrade python38-sixUpgrade python39-wheel-wheelUpgrade python39-rpm-macrosUpgrade python39-numpy-docUpgrade python39-idleUpgrade python-markupsafe-debugsourceUpgrade python38-PyMySQLUpgrade python39-psycopg2-testsUpgrade python38-numpy-f2pyUpgrade python39-requestsUpgrade python39-debugsourceUpgrade python39-cffi-debuginfoUpgrade python38-wheelUpgrade python38-markupsafe-debuginfoUpgrade python38-lxmlUpgrade python38-cffi-debuginfoUpgrade python38-tkinterUpgrade python38-asn1cryptoUpgrade python39-testUpgrade python39-pip | Nov 10, 2021 | Jun 29, 2021 |
| Debian | — | Upgrade python-urllib3 | Jul 30, 2024 | Jun 29, 2021 |
| Gentoo Linux | — | Upgrade dev-python/urllib3. | Jul 16, 2021 | Jun 29, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python-pip-wheelUpgrade python3-pip | Dec 22, 2022 | Jun 29, 2021 |
| Oracle Solaris | — | Upgrade library/python/urllib3-27 to version 1.26.6-11.4.37.0.1.101.1 on Solaris 11.4Upgrade library/python/urllib3-37 to version 1.26.6-11.4.37.0.1.101.1 on Solaris 11.4Upgrade library/python/urllib3 to version 1.26.6-11.4.37.0.1.101.1 on Solaris 11.4Upgrade library/python/urllib3-39 to version 1.26.6-11.4.37.0.1.101.1 on Solaris 11.4 | Oct 12, 2021 | Jun 29, 2021 |
| Oracle_linux | — | Upgrade python39-lxmlUpgrade python39-chardetUpgrade python38-more-itertoolsUpgrade python39-CythonUpgrade python38-tkinterUpgrade python39-idleUpgrade python39-urllib3Upgrade python39-setuptools-wheelUpgrade python38-requestsUpgrade python38-jinja2Upgrade python38-pytzUpgrade python38-mod_wsgiUpgrade python38-plyUpgrade python38-psutilUpgrade python38-chardetUpgrade python39-cryptographyUpgrade python39-numpyUpgrade python38-setuptools-wheelUpgrade python38-asn1cryptoUpgrade python38-wcwidthUpgrade python39-plyUpgrade python39-sixUpgrade python38-cryptographyUpgrade python39-iniconfigUpgrade python39-numpy-f2pyUpgrade python39-cffiUpgrade python39-tomlUpgrade python38-setuptoolsUpgrade python38-attrsUpgrade python38-debugUpgrade python39-rpm-macrosUpgrade python38-pytestUpgrade python38-wheel-wheelUpgrade python39Upgrade python39-scipyUpgrade python39-setuptoolsUpgrade python39-pyyamlUpgrade python39-pyUpgrade python39-wcwidthUpgrade python38-rpm-macrosUpgrade python39-pyparsingUpgrade python39-idnaUpgrade python38-pyyamlUpgrade python38-babelUpgrade python38-testUpgrade python39-pipUpgrade python39-pycparserUpgrade python39-pybind11-develUpgrade python38-numpyUpgrade python38-pysocksUpgrade python38-CythonUpgrade python39-attrsUpgrade python38-psycopg2-docUpgrade python38-packagingUpgrade python38-idnaUpgrade python38-psycopg2Upgrade python39-pytestUpgrade python38-idleUpgrade python38-numpy-f2pyUpgrade python39-psycopg2-docUpgrade python38-markupsafeUpgrade python39-pybind11Upgrade python39-pip-wheelUpgrade python39-more-itertoolsUpgrade python38-pyparsingUpgrade python38-lxmlUpgrade python38-cffiUpgrade python38-atomicwritesUpgrade python39-tkinterUpgrade python39-packagingUpgrade python39-mod_wsgiUpgrade python38-psycopg2-testsUpgrade python39-develUpgrade python38-pyUpgrade python38-wheelUpgrade python38-sixUpgrade python39-requestsUpgrade python39-wheelUpgrade python39-wheel-wheelUpgrade python39-pluggyUpgrade python39-numpy-docUpgrade python38-pycparserUpgrade python38-pipUpgrade python38-numpy-docUpgrade python38-develUpgrade python38-urllib3Upgrade python38-scipyUpgrade python38-pluggyUpgrade python38-libsUpgrade python39-psycopg2-testsUpgrade python39-debugUpgrade python38-pip-wheelUpgrade python39-psycopg2Upgrade python39-testUpgrade python39-libsUpgrade python38Upgrade python39-pysocksUpgrade python38-PyMySQLUpgrade python39-PyMySQLUpgrade python39-psutil | Jul 22, 2024 | Jun 1, 2021 |
| Redhat_linux | — | Upgrade python39-psycopg2Upgrade python38-rpm-macrosUpgrade python38-pyUpgrade python38-tkinterUpgrade python38-numpy-debuginfoUpgrade python38-numpy-f2pyUpgrade python38-psycopg2-testsUpgrade python39-cryptography-debuginfoUpgrade python39-develUpgrade python38-idnaUpgrade python39-idleUpgrade python-psutil-debugsourceUpgrade python38-sixUpgrade numpy-debugsourceUpgrade PyYAML-debugsourceUpgrade python38-pycparserUpgrade python39-psycopg2-docUpgrade python39-more-itertoolsUpgrade python38-wheelUpgrade python38-PyMySQLUpgrade python39-debugsourceUpgrade python39-Cython-debuginfoUpgrade python39-wcwidthUpgrade python39-numpy-docUpgrade python39-scipy-debuginfoUpgrade python39-testUpgrade python38-psycopg2-docUpgrade python39-lxmlUpgrade python39-pyyaml-debuginfoUpgrade python-cffi-debugsourceUpgrade python39-libsUpgrade python39-cffiUpgrade python-markupsafe-debugsourceUpgrade python38-wheel-wheelUpgrade python38-pysocksUpgrade python38-libsUpgrade python39-psycopg2-debuginfoUpgrade python39-requestsUpgrade python38-markupsafeUpgrade python38-Cython-debuginfoUpgrade python39-numpy-debuginfoUpgrade python39-psutil-debuginfoUpgrade python39-cffi-debuginfoUpgrade python38-scipyUpgrade python38-attrsUpgrade python39-pluggyUpgrade python38-asn1cryptoUpgrade python38-numpyUpgrade python39-psutilUpgrade python38-pluggyUpgrade python38-pip-wheelUpgrade python39-PyMySQLUpgrade python38-psycopg2Upgrade python38-markupsafe-debuginfoUpgrade python38-packagingUpgrade python39-pip-wheelUpgrade python38-atomicwritesUpgrade python38-pyparsingUpgrade python39-debuginfoUpgrade python38-testUpgrade python39-lxml-debuginfoUpgrade python38-debuginfoUpgrade python39-debugUpgrade python39Upgrade python39-wheel-wheelUpgrade python38-cffiUpgrade python38-psutil-debuginfoUpgrade python39-attrsUpgrade python38-develUpgrade python38-cryptography-debuginfoUpgrade python39-wheelUpgrade python39-mod_wsgiUpgrade python38-pytestUpgrade python38-numpy-docUpgrade python39-setuptools-wheelUpgrade scipy-debugsourceUpgrade python39-pybind11Upgrade python39-pyparsingUpgrade python39-iniconfigUpgrade python39-pipUpgrade python39-pyyamlUpgrade python38Upgrade python39-plyUpgrade python39-packagingUpgrade python38-pyyaml-debuginfoUpgrade python38-more-itertoolsUpgrade python38-debugUpgrade python38-setuptools-wheelUpgrade python39-psycopg2-testsUpgrade python38-cryptographyUpgrade python38-lxml-debuginfoUpgrade python39-numpy-f2pyUpgrade python39-CythonUpgrade python38-chardetUpgrade python38-jinja2Upgrade python39-pycparserUpgrade python38-babelUpgrade python39-pybind11-develUpgrade python39-cryptographyUpgrade python38-debugsourceUpgrade python38-pyyamlUpgrade python39-pyUpgrade python39-tomlUpgrade python38-plyUpgrade python38-pipUpgrade python38-lxmlUpgrade python39-urllib3Upgrade python-cryptography-debugsourceUpgrade python38-mod_wsgiUpgrade python39-pytestUpgrade python38-idleUpgrade python38-pytzUpgrade python39-idnaUpgrade python39-rpm-macrosUpgrade python38-requestsUpgrade python-lxml-debugsourceUpgrade python39-scipyUpgrade python38-setuptoolsUpgrade python38-urllib3Upgrade python38-psutilUpgrade python39-numpyUpgrade python-psycopg2-debugsourceUpgrade python38-CythonUpgrade python39-pysocksUpgrade python38-scipy-debuginfoUpgrade Cython-debugsourceUpgrade python39-tkinterUpgrade python38-psycopg2-debuginfoUpgrade python39-sixUpgrade python39-setuptoolsUpgrade python38-cffi-debuginfoUpgrade python39-chardetUpgrade python38-wcwidth | Nov 10, 2021 | Jun 29, 2021 |
| Rocky_linux | — | Upgrade python38-debugUpgrade python39-psycopg2Upgrade python38-pyyamlUpgrade python39-tkinterUpgrade python39-scipy-debuginfoUpgrade python38-CythonUpgrade python38-pyyaml-debuginfoUpgrade python-psutil-debugsourceUpgrade PyYAML-debugsourceUpgrade python39-debuginfoUpgrade python-cffi-debugsourceUpgrade python38-scipyUpgrade python39-psycopg2-debuginfoUpgrade python39-pyyaml-debuginfoUpgrade python38-psycopg2-testsUpgrade python39-testUpgrade python38-numpy-debuginfoUpgrade python38-debuginfoUpgrade python38-lxml-debuginfoUpgrade python39-cffiUpgrade python39-cryptography-debuginfoUpgrade python38-debugsourceUpgrade numpy-debugsourceUpgrade python38-Cython-debuginfoUpgrade python39-debugUpgrade python39-mod_wsgiUpgrade python38-markupsafeUpgrade python39-psutilUpgrade python39-numpy-debuginfoUpgrade python38Upgrade python39-pyyamlUpgrade python39-CythonUpgrade python38-scipy-debuginfoUpgrade python-lxml-debugsourceUpgrade python39-scipyUpgrade python39-pybind11-develUpgrade python39-pybind11Upgrade python-cryptography-debugsourceUpgrade python38-libsUpgrade python39-psycopg2-docUpgrade python39-lxml-debuginfoUpgrade python39-lxmlUpgrade python39-cryptographyUpgrade python39-psycopg2-testsUpgrade python38-psycopg2-debuginfoUpgrade python38-cryptographyUpgrade python39-debugsourceUpgrade python38-psutilUpgrade scipy-debugsourceUpgrade python38-lxmlUpgrade python38-psycopg2-docUpgrade python-psycopg2-debugsourceUpgrade python-markupsafe-debugsourceUpgrade python39-psutil-debuginfoUpgrade python39-Cython-debuginfoUpgrade python39Upgrade python38-tkinterUpgrade python38-testUpgrade python39-idleUpgrade python39-develUpgrade python38-develUpgrade python38-cffi-debuginfoUpgrade python38-cffiUpgrade Cython-debugsourceUpgrade python39-numpy-f2pyUpgrade python38-numpy-f2pyUpgrade python38-numpyUpgrade python39-libsUpgrade python39-cffi-debuginfoUpgrade python38-psutil-debuginfoUpgrade python38-psycopg2Upgrade python38-cryptography-debuginfoUpgrade python38-markupsafe-debuginfoUpgrade python38-mod_wsgiUpgrade python38-idleUpgrade python39-numpy | Mar 12, 2024 | Jun 29, 2021 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Jun 29, 2021 |
| Suse | — | Upgrade python3-urllib3Upgrade python-urllib3 | Jun 19, 2021 | Jun 18, 2021 |
| Ubuntu | — | Upgrade python3-urllib3 | Jan 20, 2023 | Jun 18, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 29, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub