Urllib3

Latest version: v2.2.3

Safety actively analyzes 685670 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 13 of 17

1.10

Not secure
=================

* Disabled SSLv3. (Issue 473)

* Add ``Url.url`` property to return the composed url string. (Issue 394)

* Fixed PyOpenSSL + gevent ``WantWriteError``. (Issue 412)

* ``MaxRetryError.reason`` will always be an exception, not string.
(Issue 481)

* Fixed SSL-related timeouts not being detected as timeouts. (Issue 492)

* Py3: Use ``ssl.create_default_context()`` when available. (Issue 473)

* Emit ``InsecureRequestWarning`` for *every* insecure HTTPS request.
(Issue 496)

* Emit ``SecurityWarning`` when certificate has no ``subjectAltName``.
(Issue 499)

* Close and discard sockets which experienced SSL-related errors.
(Issue 501)

* Handle ``body`` param in ``.request(...)``. (Issue 513)

* Respect timeout with HTTPS proxy. (Issue 505)

* PyOpenSSL: Handle ZeroReturnError exception. (Issue 520)

1.9.1

Not secure
==================

* Apply socket arguments before binding. (Issue 427)

* More careful checks if fp-like object is closed. (Issue 435)

* Fixed packaging issues of some development-related files not
getting included. (Issue 440)

* Allow performing *only* fingerprint verification. (Issue 444)

* Emit ``SecurityWarning`` if system clock is waaay off. (Issue 445)

* Fixed PyOpenSSL compatibility with PyPy. (Issue 450)

* Fixed ``BrokenPipeError`` and ``ConnectionError`` handling in Py3.
(Issue 443)

1.9

Not secure
================

* Shuffled around development-related files. If you're maintaining a distro
package of urllib3, you may need to tweak things. (Issue 415)

* Unverified HTTPS requests will trigger a warning on the first request. See
our new `security documentation
<https://urllib3.readthedocs.io/en/latest/security.html>`_ for details.
(Issue 426)

* New retry logic and ``urllib3.util.retry.Retry`` configuration object.
(Issue 326)

* All raised exceptions should now wrapped in a
``urllib3.exceptions.HTTPException``-extending exception. (Issue 326)

* All errors during a retry-enabled request should be wrapped in
``urllib3.exceptions.MaxRetryError``, including timeout-related exceptions
which were previously exempt. Underlying error is accessible from the
``.reason`` property. (Issue 326)

* ``urllib3.exceptions.ConnectionError`` renamed to
``urllib3.exceptions.ProtocolError``. (Issue 326)

* Errors during response read (such as IncompleteRead) are now wrapped in
``urllib3.exceptions.ProtocolError``. (Issue 418)

* Requesting an empty host will raise ``urllib3.exceptions.LocationValueError``.
(Issue 417)

* Catch read timeouts over SSL connections as
``urllib3.exceptions.ReadTimeoutError``. (Issue 419)

* Apply socket arguments before connecting. (Issue 427)

1.8.3

Not secure
==================

* Fix TLS verification when using a proxy in Python 3.4.1. (Issue 385)

* Add ``disable_cache`` option to ``urllib3.util.make_headers``. (Issue 393)

* Wrap ``socket.timeout`` exception with
``urllib3.exceptions.ReadTimeoutError``. (Issue 399)

* Fixed proxy-related bug where connections were being reused incorrectly.
(Issues 366, 369)

* Added ``socket_options`` keyword parameter which allows to define
``setsockopt`` configuration of new sockets. (Issue 397)

* Removed ``HTTPConnection.tcp_nodelay`` in favor of
``HTTPConnection.default_socket_options``. (Issue 397)

* Fixed ``TypeError`` bug in Python 2.6.4. (Issue 411)

1.8.2

Not secure
==================

* Fix ``urllib3.util`` not being included in the package.

1.8.1

==================

* Fix AppEngine bug of HTTPS requests going out as HTTP. (Issue 356)

* Don't install ``dummyserver`` into ``site-packages`` as it's only needed
for the test suite. (Issue 362)

* Added support for specifying ``source_address``. (Issue 352)

Page 13 of 17

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.