The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in differential parsing across the Python URL parser and other specification-compliant URL parsers.
CVSS Details
- CVSS 4.0 Base Score: 6.3 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python39-mod_wsgiUpgrade python39-pycparserUpgrade python3-debugUpgrade python3-idleUpgrade python3.11-libsUpgrade python3.12-testUpgrade python39-pybind11-develUpgrade python39-iniconfigUpgrade python39-idnaUpgrade python39-cryptographyUpgrade python39-idleUpgrade python3.11-idleUpgrade python39-pipUpgrade python39-pyyamlUpgrade python39-wheelUpgrade python39-pyUpgrade python39-cffiUpgrade python39-numpy-f2pyUpgrade python39-pysocksUpgrade platform-python-develUpgrade python39-requestsUpgrade python39-chardetUpgrade python3.12Upgrade python39-urllib3Upgrade python39-setuptools-wheelUpgrade python39-lxmlUpgrade python39-sixUpgrade python39-wcwidthUpgrade python39Upgrade python39-attrsUpgrade python39-libsUpgrade python39-psycopg2Upgrade python3-tkinterUpgrade python39-pybind11Upgrade python39-PyMySQLUpgrade python39-numpyUpgrade python3.11Upgrade python3.12-libsUpgrade python3-testUpgrade python39-tkinterUpgrade python-unversioned-commandUpgrade platform-pythonUpgrade python39-psycopg2-testsUpgrade python3.11-tkinterUpgrade python39-pip-wheelUpgrade python3-libsUpgrade python39-numpy-docUpgrade python3-develUpgrade python39-scipyUpgrade python3.11-debugUpgrade python39-packagingUpgrade platform-python-debugUpgrade python39-rpm-macrosUpgrade python39-debugUpgrade python3Upgrade python39-pyparsingUpgrade python39-psutilUpgrade python39-pytestUpgrade python39-CythonUpgrade python39-tomlUpgrade python3.11-testUpgrade python3.11-develUpgrade python3.12-develUpgrade python3.12-debugUpgrade python39-develUpgrade python39-psycopg2-docUpgrade python39-pluggyUpgrade python39-more-itertoolsUpgrade python39-testUpgrade python39-plyUpgrade python3.12-tkinterUpgrade python39-wheel-wheelUpgrade python39-setuptoolsUpgrade python3.12-idle | Jul 4, 2025 | Jan 31, 2025 |
| Alpine Linux | — | Upgrade python3 | Aug 8, 2025 | Jan 31, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python-develUpgrade python3-develUpgrade python3-toolsUpgrade python-debugUpgrade python3-libsUpgrade python-libsUpgrade python3-debuginfoUpgrade python3-debugUpgrade python3-tkinterUpgrade python-toolsUpgrade python-debuginfoUpgrade pythonUpgrade python-testUpgrade python3Upgrade python3-testUpgrade tkinter | Mar 26, 2025 | Jan 31, 2025 |
| Amazon_linux_2023 | — | Upgrade python3.12-develUpgrade python3.11-tkinterUpgrade python3.12-debugUpgrade python3.12-testUpgrade python3Upgrade python3.12-libsUpgrade python-unversioned-commandUpgrade python3-idleUpgrade python3.11-libsUpgrade python3.11-idleUpgrade python3-libsUpgrade python3.12-debugsourceUpgrade python3.12-idleUpgrade python3.11-debuginfoUpgrade python3.11-testUpgrade python3.9-debuginfoUpgrade python3-testUpgrade python3-develUpgrade python3.12-tkinterUpgrade python3.9-debugsourceUpgrade python3-tkinterUpgrade python3.11-develUpgrade python3.12Upgrade python3-debugUpgrade python3.11Upgrade python3.11-debugsourceUpgrade python3.11-debugUpgrade python3.12-debuginfo | Mar 10, 2025 | Jan 31, 2025 |
| Debian | — | Upgrade python3.13Upgrade pypy3Upgrade python3.11Upgrade python3.9 | Mar 21, 2025 | Jan 31, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 2, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-unversioned-commandUpgrade python3 | Jun 13, 2025 | Jan 31, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3Upgrade python3-fgoUpgrade python3-unversioned-command | May 7, 2025 | Jan 31, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-unversioned-commandUpgrade python3-fgoUpgrade python3 | Jun 11, 2025 | Jan 31, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Apr 28, 2026 |
| Oracle_linux | — | Upgrade python39-pyUpgrade python39-pybind11Upgrade python39-develUpgrade python39-psycopg2Upgrade python3-idleUpgrade python39-libsUpgrade python3-develUpgrade python39-urllib3Upgrade python39-pytestUpgrade python3-testUpgrade python39-sixUpgrade python39-wheelUpgrade python39-requestsUpgrade python39-numpy-docUpgrade python39-setuptoolsUpgrade python39-cffiUpgrade python39-psutilUpgrade python39-pybind11-develUpgrade python39-pipUpgrade python39-mod_wsgiUpgrade python39-rpm-macrosUpgrade python3-debugUpgrade python39-idnaUpgrade python3.11-develUpgrade python39-plyUpgrade python3.12-tkinterUpgrade python39-pyyamlUpgrade python3-tkinterUpgrade python3.11-idleUpgrade python39-cryptographyUpgrade python39-pycparserUpgrade python39-pysocksUpgrade python3-libsUpgrade python39-idleUpgrade python3.12Upgrade python39Upgrade python39-chardetUpgrade python39-tomlUpgrade platform-pythonUpgrade python39-setuptools-wheelUpgrade python39-testUpgrade python3.11-libsUpgrade python3.12-testUpgrade python3.11-tkinterUpgrade python3.11Upgrade python39-tkinterUpgrade python3.11-testUpgrade platform-python-develUpgrade python39-numpyUpgrade python39-lxmlUpgrade python39-CythonUpgrade python39-psycopg2-testsUpgrade platform-python-debugUpgrade python39-pluggyUpgrade python3.11-debugUpgrade python39-scipyUpgrade python39-attrsUpgrade python-unversioned-commandUpgrade python39-iniconfigUpgrade python3.12-idleUpgrade python39-packagingUpgrade python39-psycopg2-docUpgrade python39-numpy-f2pyUpgrade python3.12-debugUpgrade python3Upgrade python39-wcwidthUpgrade python39-PyMySQLUpgrade python39-debugUpgrade python39-wheel-wheelUpgrade python39-pyparsingUpgrade python39-pip-wheelUpgrade python39-more-itertoolsUpgrade python3.12-libsUpgrade python3.12-devel | May 26, 2025 | Jan 31, 2025 |
| Redhat_linux | — | Upgrade python39-scipyUpgrade python39-pybind11Upgrade python3.12-debugsourceUpgrade python-lxml-debugsourceUpgrade python39-psycopg2-docUpgrade python39-psycopg2-testsUpgrade python3.9-debugsourceUpgrade python39-numpy-f2pyUpgrade python39-pluggyUpgrade python39-rpm-macrosUpgrade platform-python-debugUpgrade python39-testUpgrade python3.11-tkinterUpgrade python39-develUpgrade Cython-debugsourceUpgrade python-cryptography-debugsourceUpgrade python39-pyyaml-debuginfoUpgrade python39-iniconfigUpgrade PyYAML-debugsourceUpgrade python39-scipy-debuginfoUpgrade python39-more-itertoolsUpgrade python39-debugUpgrade python3.11-libsUpgrade python39-numpy-docUpgrade python39-wcwidthUpgrade python3.11-testUpgrade python3.12-debugUpgrade python39-pyparsingUpgrade python3.11-debugUpgrade python3.12-idleUpgrade python3.11Upgrade python39-CythonUpgrade python39-pyUpgrade python3.9-debuginfoUpgrade python3-idleUpgrade python39-libsUpgrade python3-debuginfoUpgrade python3.12-tkinterUpgrade python39-cffi-debuginfoUpgrade python39-wheel-wheelUpgrade python3-develUpgrade python3-libsUpgrade python39-attrsUpgrade platform-python-develUpgrade python39-psutil-debuginfoUpgrade python39-numpyUpgrade python39-pytestUpgrade python39-lxmlUpgrade python39-packagingUpgrade python39-debuginfoUpgrade python39-PyMySQLUpgrade python3.12-develUpgrade python3.12-libsUpgrade python-cffi-debugsourceUpgrade python3Upgrade python39-tkinterUpgrade python-unversioned-commandUpgrade platform-pythonUpgrade python39-psycopg2-debuginfoUpgrade python39-idleUpgrade python39-cryptographyUpgrade python3.11-debuginfoUpgrade python39-pyyamlUpgrade numpy-debugsourceUpgrade python39-setuptoolsNo solution existsUpgrade python39-Cython-debuginfoUpgrade python39-pip-wheelUpgrade python-psutil-debugsourceUpgrade python39-sixUpgrade python3.12-testUpgrade python39-debugsourceUpgrade scipy-debugsourceUpgrade python39-psutilUpgrade python39-cryptography-debuginfoUpgrade python3.11-idleUpgrade python39-psycopg2Upgrade python39-mod_wsgiUpgrade python3-debugsourceUpgrade python3-debugUpgrade python39-idnaUpgrade python-psycopg2-debugsourceUpgrade python3.12-debuginfoUpgrade python39-wheelUpgrade python39-tomlUpgrade python39-pipUpgrade python39-setuptools-wheelUpgrade python39-chardetUpgrade python39-pybind11-develUpgrade python39-pysocksUpgrade python39Upgrade python39-lxml-debuginfoUpgrade python3.12Upgrade python39-numpy-debuginfoUpgrade python39-cffiUpgrade python3-tkinterUpgrade python39-requestsUpgrade python39-pycparserUpgrade python39-plyUpgrade python3.11-develUpgrade python3.11-debugsourceUpgrade python3-testUpgrade python39-urllib3 | May 14, 2025 | Jan 31, 2025 |
| Rocky_linux | — | Upgrade python39-debuginfoUpgrade python39-pyyaml-debuginfoUpgrade python-cryptography-debugsourceUpgrade python39-develUpgrade python3.12-tkinterUpgrade python39-cryptography-debuginfoUpgrade python3-libsUpgrade python3.11-testUpgrade python39-Cython-debuginfoUpgrade python39-lxml-debuginfoUpgrade python3-tkinterUpgrade python39-testUpgrade python3.11Upgrade python39-cffiUpgrade python39Upgrade python3-idleUpgrade python3.12-testUpgrade PyYAML-debugsourceUpgrade python39-libsUpgrade python39-scipy-debuginfoUpgrade Cython-debugsourceUpgrade python39-debugUpgrade python39-cffi-debuginfoUpgrade python3.11-idleUpgrade python39-psycopg2-testsUpgrade python39-debugsourceUpgrade python3.11-tkinterUpgrade python39-numpy-f2pyUpgrade python39-psutil-debuginfoUpgrade python39-pybind11Upgrade python39-idleUpgrade python-cffi-debugsourceUpgrade python39-psycopg2Upgrade python3.11-debugsourceUpgrade python3-testUpgrade python39-mod_wsgiUpgrade python39-pybind11-develUpgrade python-psutil-debugsourceUpgrade python39-pyyamlUpgrade python3.12-idleUpgrade python3.11-libsUpgrade python3Upgrade python3-develUpgrade python39-numpyUpgrade python3.12-debuginfoUpgrade python3.12-libsUpgrade python39-psycopg2-debuginfoUpgrade python39-cryptographyUpgrade python-lxml-debugsourceUpgrade python39-psycopg2-docUpgrade python3.12-develUpgrade python3.12Upgrade python39-CythonUpgrade python39-psutilUpgrade python3.12-debugUpgrade python3.11-debuginfoUpgrade python3.11-debugUpgrade python39-tkinterUpgrade scipy-debugsourceUpgrade python39-scipyUpgrade python-psycopg2-debugsourceUpgrade python3.11-develUpgrade numpy-debugsourceUpgrade python3.12-debugsourceUpgrade python3-debugUpgrade python39-numpy-debuginfoUpgrade python39-lxml | Oct 6, 2025 | Oct 4, 2025 |
| Suse | — | Upgrade python312-develUpgrade python39-doc-devhelpUpgrade python39-docUpgrade libpython3_13-1_0-x86-64-v3Upgrade python3-cursesUpgrade python312-dbmUpgrade libpython2_7-1_0Upgrade libpython3_12-1_0-32bitUpgrade python3-testsuiteUpgrade python313-dbmUpgrade python36-baseUpgrade python310-base-32bitUpgrade python-32bitUpgrade python-cursesUpgrade python39-tkUpgrade python310-idleUpgrade python312-docUpgrade python39Upgrade python311-32bitUpgrade python312-tkUpgrade python311-idleUpgrade python-develUpgrade python3-tkUpgrade libpython3_4m1_0Upgrade python311-doc-devhelpUpgrade python36-develUpgrade python-xmlUpgrade libpython3_9-1_0Upgrade python313-base-x86-64-v3Upgrade python313-cursesUpgrade python310-tkUpgrade python39-base-32bitUpgrade python39-dbmUpgrade python312Upgrade python310-doc-devhelpUpgrade python39-cursesUpgrade libpython3_9-1_0-32bitUpgrade python39-32bitUpgrade python310-dbmUpgrade python312-baseUpgrade python313Upgrade python311Upgrade python311-base-32bitUpgrade python311-cursesUpgrade python311-testsuiteUpgrade python310-32bitUpgrade python310-cursesUpgrade python-baseUpgrade python39-develUpgrade python-demoUpgrade libpython2_7-1_0-32bitUpgrade libpython3_6m1_0-32bitUpgrade python312-base-32bitUpgrade python310-testsuiteUpgrade python310-develUpgrade python-doc-pdfUpgrade pythonUpgrade python313-baseUpgrade python312-doc-devhelpUpgrade python3-toolsUpgrade python-docUpgrade python3-docUpgrade python311-docUpgrade libpython3_12-1_0Upgrade python313-doc-devhelpUpgrade libpython3_6m1_0Upgrade libpython3_11-1_0Upgrade libpython3_10-1_0Upgrade python39-toolsUpgrade python313-toolsUpgrade libpython3_10-1_0-32bitUpgrade python312-testsuiteUpgrade python312-idleUpgrade python312-cursesUpgrade python312-32bitUpgrade python311-toolsUpgrade python311-tkUpgrade python-base-32bitUpgrade python310Upgrade python-tkUpgrade python313-x86-64-v3Upgrade python313-docUpgrade python36Upgrade python312-toolsUpgrade python311-dbmUpgrade python310-toolsUpgrade python3-idleUpgrade python3-dbmUpgrade libpython3_13-1_0Upgrade python39-testsuiteUpgrade python39-baseUpgrade libpython3_11-1_0-32bitUpgrade libpython3_4m1_0-32bitUpgrade python3-baseUpgrade python3Upgrade python39-idleUpgrade python313-idleUpgrade python313-develUpgrade python311-develUpgrade python310-docUpgrade python-idleUpgrade python3-develUpgrade python-gdbmUpgrade python310-baseUpgrade python3-doc-devhelpUpgrade python311-baseUpgrade python313-tk | Feb 10, 2025 | Jan 31, 2025 |
| Ubuntu | — | Upgrade python3.6-minimal (Ubuntu Pro)Upgrade python3.11 (Ubuntu Pro)Upgrade python3.10Upgrade python3.11-minimal (Ubuntu Pro)Upgrade python2.7 (Ubuntu Pro)Upgrade libpython2.7 (Ubuntu Pro)Upgrade python3.13Upgrade python3.5 (Ubuntu Pro)Upgrade python3.12Upgrade python3.8-minimalUpgrade python3.7 (Ubuntu Pro)Upgrade python3.10-minimalUpgrade python3.5-venv (Ubuntu Pro)Upgrade python3.13-minimalUpgrade python3.4-minimal (Ubuntu Pro)Upgrade python3.9-minimal (Ubuntu Pro)Upgrade python3.9 (Ubuntu Pro)Upgrade python3.8Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.8-minimal (Ubuntu Pro)Upgrade python3.4 (Ubuntu Pro)Upgrade python3.6 (Ubuntu Pro)Upgrade python3.8 (Ubuntu Pro)Upgrade python3.12-minimalUpgrade python3.8-venvUpgrade python3.7-minimal (Ubuntu Pro)Upgrade python2.7-minimal (Ubuntu Pro) | Feb 21, 2025 | Jan 31, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub