https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 06:55:02 +0000 https://cve.radiocsirt.org/vuln/cve-2026-44431 <p><strong>Affected:</strong> urllib3</p> <p>urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.</p> <p><strong>Affected:</strong> urllib3</p> <p>urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-44431 https://cve.radiocsirt.org/vuln/ghsa-jp4c-xjxw-mgf9 <p><strong>Affected:</strong> PyPI: pip</p> <p>pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were intentionally deferred to increase startup time of the pip CLI. The patch changes self-update functionality to run before wheels are installed to prevent newly-installed modules from being imported shortly after the installation of a wheel package. Users should still review package contents prior to installation.</p> <p><strong>Affected:</strong> PyPI: pip</p> <p>pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were intentionally deferred to increase startup time of the pip CLI. The patch changes self-update functionality to run before wheels are installed to prevent newly-installed modules from being imported shortly after the installation of a wheel package. Users should still review package contents prior to installation.</p> https://cve.radiocsirt.org/vuln/ghsa-jp4c-xjxw-mgf9