Summary
[1.24.2-11]
- CVE-2026-97689 python-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser
memory allocation in chunk parser
Resolves: RHEL-282251
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | python3-urllib3 | 0:1.24.2-11.el8_10 |
Vulnerabilities 1
-
High 8.9
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a l…