VYPR
← All advisories
Medium severity5.3GHSA Advisory· Published May 13, 2026· Updated May 14, 2026

CVE-2026-44431

CVE-2026-44431

Description

urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
urllib3PyPI
>= 1.23, < 2.7.02.7.0

Affected products

186

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.