Medium DLA-1828-1 1 CVE

python-urllib3 - security update

Published Jun 19, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	python-urllib3	1.9.1-3+deb8u1

Vulnerabilities 1

Medium 6.1

CVE-2019-11236

Improper Neutralization of CRLF Sequences in urllib3 library for Python

In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.

urllib3 python-urllib3 python-urllib3 Debian Ubuntu PyPI

Apr 15, 2019