python3Packages.urllib3
urllib3 2.7.0 · pkgs/development/python-modules/urllib3/default.nix
Health
Risk
risk 60 critical
- +60 3 open advisories
Version
2.7.0 no newer release known to repology
Channels
Hydra
succeeded 10y ago
Advisories
GHSA-8988-9cw3-xx77 high urllib3: HTTPS proxy TLS configuration may be ignored or overridden (OSV, for this version)
CVE-2026-97687
GHSA-gh4c-6fx4-qh6g medium urllib3: Chunked Deflate streaming can enter an infinite loop (OSV, for this version)
CVE-2026-97688
GHSA-vxq7-64xx-v4gw high EPSS 0.3% urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory (OSV, for this version)
CVE-2026-97689
Packaging
not read yet: the next index sweep reads it
Maintainers
Pull requests 0
None open.
Closed or merged in the synced window 4
staging-next-26.05 iteration 7 - 2026-09-12
#563094 by vcunat · merged 3w ago
python3Packages: enable structuredAttrs for packages needed for Rust
#546248 by SFrijters · closed 8d ago
[Backport staging-26.05] python3Packages.urllib3: 2.6.3 -> 2.7.0
#524510 by nixpkgs-ci · merged 5w ago
[Backport staging-26.05] python3Packages.urllib3: 2.6.3 -> 2.7.0 / CVE-2026-44432
#520639 by h0nIg · closed 5w ago
Issues 3
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory 1.severity: security
#568639 by nixpkgs-security-tracker · opened 2w ago · 1 comments
python313Packages.urllib3 & awscli2: CVE-2025-66418 + CVE-2025-66471 2.status: stale
#470151 by h0nIg · opened 10mo ago · 2 comments