Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/python-urllib3@2.5.0-1.1?distro=trixie
purl pkg:deb/debian/python-urllib3@2.5.0-1.1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-v365-pn8r-e7dh urllib3 allows an unbounded number of links in the decompression chain urllib3 supports chained HTTP encoding algorithms for response content according to RFC 9110 (e.g., `Content-Encoding: gzip, zstd`). However, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory allocation for the decompressed data. CVE-2025-66418
GHSA-gm62-xv2j-4w53

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:07:04.418497+00:00 Debian Importer Fixing VCID-v365-pn8r-e7dh https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:17:06.421717+00:00 Debian Importer Fixing VCID-v365-pn8r-e7dh https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:50:56.037824+00:00 Debian Importer Fixing VCID-v365-pn8r-e7dh https://security-tracker.debian.org/tracker/data/json 38.1.0