https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 23:19:39 +0000 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-66418 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: python-urllib3, Ubuntu:22.04:LTS: python-urllib3, Ubuntu:Pro:22.04:LTS: python-pip, Ubuntu:24.04:LTS: python-urllib3, Ubuntu:Pro:24.04:LTS: python-pip, Ubuntu:25.10: python-pip, Ubuntu:25.10: python-urllib3, Ubuntu:26.04:LTS: python-urllib3</p> <p>urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory allocation for the decompressed data. This vulnerability is fixed in 2.6.0.</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: python-urllib3, Ubuntu:22.04:LTS: python-urllib3, Ubuntu:Pro:22.04:LTS: python-pip, Ubuntu:24.04:LTS: python-urllib3, Ubuntu:Pro:24.04:LTS: python-pip, Ubuntu:25.10: python-pip, Ubuntu:25.10: python-urllib3, Ubuntu:26.04:LTS: python-urllib3</p> <p>urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory allocation for the decompressed data. This vulnerability is fixed in 2.6.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-66418