Workflow

Urllib3

Latest version: v2.2.3

The latest version of urllib3 with no known security vulnerabilities is 2.2.3. We recommend installing version 2.2.3.

The information on this page was curated by experts in our Cybersecurity Intelligence Team.

Latest release
v2.2.3 at Sept. 12, 2024
License
MIT (MIT License)

Description

HTTP library with thread-safe connection pooling, file post, and more.

Resources

Vulnerabilities (13)

See all vulnerabilities
CVE-2023-45803
Affected versions:

<1.26.18 | >=2.0.0a1,<2.0.7

Urllib3 1.26.18 and 2.0.7 include a fix for CVE-2023-45803: Re…
CVE-2024-37891
Affected versions:

<=1.26.18 | >=2.0.0a1,<=2.2.1

Urllib3's ProxyManager ensures that the Proxy-Authorization he…
CVE-2023-43804
Affected versions:

<1.26.17 | >=2.0.0a1,<2.0.5

Urllib3 1.26.17 and 2.0.5 include a fix for CVE-2023-43804: Ur…
CVE-2016-9015
Affected versions:

==1.17 | ==1.18

Urllib3 version 1.18.1 includes a fix for CVE-2016-9015: Versi…
CVE-2021-33503
Affected versions:

<1.26.5

Urllib3 1.26.5 includes a fix for CVE-2021-33503: When provide…
CVE-2021-28363
Affected versions:

>=1.26.0,<1.26.4

Urllib3 1.26.4 includes a fix for CVE-2021-28363: The urllib3 …

Versions (100)

See all versions

Has known vulnerabilities

  • 2.2.3
  • 2.2.2
  • 2.2.1
  • 2.2.0
  • 2.1.0
  • 2.0.7
  • 2.0.6
  • 2.0.5
  • 2.0.4
  • 2.0.3
  • 2.0.2
  • 2.0.1
  • 2.0.0
  • 2.0.0a4
  • 2.0.0a3
  • 2.0.0a2
  • 2.0.0a1
  • 1.26.20
  • 1.26.19
  • 1.26.18