Skip to content
fr Sign in
8.2 High

CVE-2026-44431 urllib3 is an HTTP client library for Python

Description

urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.

Affected products and versions

Product Affected versions Fixed in
urllib3 1.23 1.23 → < 2.7.0 2.7.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of urllib3

The 13 CVEs of urllib3 →
CVE-2026-97689 urllib3 is an HTTP client library for Python 8.9 High CVE-2026-97688 urllib3 is an HTTP client library for Python 6.9 Medium CVE-2026-97687 urllib3 is an HTTP client library for Python 7.6 High CVE-2026-44432 urllib3 is an HTTP client library for Python 8.9 High
Track this CVE