https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:35:58 +0000 https://cve.radiocsirt.org/vuln/alsa-2021:1631 <p><strong>Affected:</strong> AlmaLinux:8: python3-urllib3</p> <p>The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities.</p> <p>Security Fix(es):</p> <p>* python-urllib3: CRLF injection via HTTP request method (CVE-2020-26137)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: python3-urllib3</p> <p>The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities.</p> <p>Security Fix(es):</p> <p>* python-urllib3: CRLF injection via HTTP request method (CVE-2020-26137)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2021:1631 https://cve.radiocsirt.org/vuln/bdu:2021-05230 bdu:2021-05230 https://cve.radiocsirt.org/vuln/bdu:2021-05230 https://cve.radiocsirt.org/vuln/bell-cve-2020-26137 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2020-26137 https://cve.radiocsirt.org/vuln/brew-ansible-cve-2020-26137 <p><strong>Affected:</strong> Homebrew: ansible</p> <p>urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of `putrequest()`. NOTE: this is similar to CVE-2020-26116.</p> <p><strong>Affected:</strong> Homebrew: ansible</p> <p>urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of `putrequest()`. NOTE: this is similar to CVE-2020-26116.</p> https://cve.radiocsirt.org/vuln/brew-ansible-cve-2020-26137 https://cve.radiocsirt.org/vuln/certfr-2021-avi-791 certfr-2021-avi-791 https://cve.radiocsirt.org/vuln/certfr-2021-avi-791 https://cve.radiocsirt.org/vuln/cleanstart-2026-pw00774 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: py3-urllib3</p> <p>Package py3-urllib3 version 1.25.9-r0 fixes 1 vulnerabilities: CVE-2020-26137</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: py3-urllib3</p> <p>Package py3-urllib3 version 1.25.9-r0 fixes 1 vulnerabilities: CVE-2020-26137</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-pw00774 https://cve.radiocsirt.org/vuln/euvd-2026-45940 EUVD-2026-45940 https://cve.radiocsirt.org/vuln/euvd-2026-45940 https://cve.radiocsirt.org/vuln/fkie_cve-2020-26137 <p>urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.</p> <p>urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-26137 https://cve.radiocsirt.org/vuln/ghsa-wqvq-5m8c-6g24 <p><strong>Affected:</strong> PyPI: urllib3</p> <p>urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of `putrequest()`. NOTE: this is similar to CVE-2020-26116.</p> <p><strong>Affected:</strong> PyPI: urllib3</p> <p>urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of `putrequest()`. NOTE: this is similar to CVE-2020-26116.</p> https://cve.radiocsirt.org/vuln/ghsa-wqvq-5m8c-6g24 https://cve.radiocsirt.org/vuln/gsd-2020-26137 gsd-2020-26137 https://cve.radiocsirt.org/vuln/gsd-2020-26137 https://cve.radiocsirt.org/vuln/msrc_cve-2020-26137 msrc_CVE-2020-26137 https://cve.radiocsirt.org/vuln/msrc_cve-2020-26137 https://cve.radiocsirt.org/vuln/opensuse-su-2020:2237-1 <p>Security update for python-urllib3</p> <p>Security update for python-urllib3</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:2237-1 https://cve.radiocsirt.org/vuln/pysec-2020-148 <p><strong>Affected:</strong> PyPI: urllib3</p> <p>urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.</p> <p><strong>Affected:</strong> PyPI: urllib3</p> <p>urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.</p> https://cve.radiocsirt.org/vuln/pysec-2020-148 https://cve.radiocsirt.org/vuln/rhsa-2020:4299 <p>python-psutil: Double free because of refcount mishandling python: infinite loop in the tarfile module via crafted TAR archive python: DoS via inefficiency in IPv{4,6}Interface classes python: CRLF injection via HTTP request method in httplib/http.client python-urllib3: CRLF injection via HTTP request method</p> <p>python-psutil: Double free because of refcount mishandling python: infinite loop in the tarfile module via crafted TAR archive python: DoS via inefficiency in IPv{4,6}Interface classes python: CRLF injection via HTTP request method in httplib/http.client python-urllib3: CRLF injection via HTTP request method</p> https://cve.radiocsirt.org/vuln/rhsa-2020:4299 https://cve.radiocsirt.org/vuln/suse-su-2020:3723-1 <p>Security update for python-urllib3</p> <p>Security update for python-urllib3</p> https://cve.radiocsirt.org/vuln/suse-su-2020:3723-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-26137 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-pip, Ubuntu:16.04:LTS: python-pip, Ubuntu:16.04:LTS: python-urllib3, Ubuntu:18.04:LTS: python-pip, Ubuntu:18.04:LTS: python-urllib3, Ubuntu:20.04:LTS: python-pip, Ubuntu:20.04:LTS: python-urllib3</p> <p>urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-pip, Ubuntu:16.04:LTS: python-pip, Ubuntu:16.04:LTS: python-urllib3, Ubuntu:18.04:LTS: python-pip, Ubuntu:18.04:LTS: python-urllib3, Ubuntu:20.04:LTS: python-pip, Ubuntu:20.04:LTS: python-urllib3</p> <p>urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-26137 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0496 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um Informationen offenzulegen oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um Informationen offenzulegen oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0496