Search for packages
Package details: pkg:deb/ubuntu/python-urllib3@1.22-1ubuntu0.18.10.1
purl pkg:deb/ubuntu/python-urllib3@1.22-1ubuntu0.18.10.1
Next non-vulnerable version 1.24-1
Latest non-vulnerable version 1.24-1
Risk 4.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-3s2w-ytft-aaar
Aliases:
CVE-2018-20060
GHSA-www2-v7xj-xrc6
PYSEC-2018-32
urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the Authorization header to be exposed to unintended hosts or transmitted in cleartext.
1.24-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version