Vulnerabilities of urllib3 urllib3/urllib3
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-9375 | urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in its streaming API (`preload_content=False`) when… | 7.5 High | Jun 19, 2026 |