Vulnerabilities > Python > Urllib3 > 1.25.2
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-10-17 | CVE-2023-45803 | urllib3 is a user-friendly HTTP client library for Python. | 4.2 |
| 2023-10-04 | CVE-2023-43804 | urllib3 is a user-friendly HTTP client library for Python. | 8.1 |
| 2020-09-30 | CVE-2020-26137 | Injection vulnerability in multiple products urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). | 6.5 |
| 2020-03-06 | CVE-2020-7212 | Resource Exhaustion vulnerability in Python Urllib3 The _encode_invalid_chars function in util/url.py in the urllib3 library 1.25.2 through 1.25.7 for Python allows a denial of service (CPU consumption) because of an inefficient algorithm. | 7.5 |