PYSEC-2019-132

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/urllib3/PYSEC-2019-132.yaml

JSON Data

https://api.test.osv.dev/v1/vulns/PYSEC-2019-132

Aliases

Published

2019-04-15T15:29:00Z

Modified

2023-11-01T05:19:19.685237Z

Summary

[none]

Details

In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.

References

Affected packages

PyPI / urllib3

Package

Name: urllib3; View open source insights on deps.dev
Purl: pkg:pypi/urllib3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.24.3

Affected versions

0.*

0.2

0.3

0.3.1

0.4.0

0.4.1

1.*

1.0

1.0.1

1.0.2

1.1

1.2

1.2.1

1.2.2

1.3

1.4

1.5

1.6

1.7

1.7.1

1.8

1.8.2

1.8.3

1.9

1.9.1

1.10

1.10.1

1.10.2

1.10.3

1.10.4

1.11

1.12

1.13

1.13.1

1.14

1.15

1.15.1

1.16

1.17

1.18

1.18.1

1.19

1.19.1

1.20

1.21

1.21.1

1.22

1.23

1.24

1.24.1

1.24.2

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/urllib3/PYSEC-2019-132.yaml"