Unrated
CVE-2026-111497
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 31
Reset filters
Critical
ghsa-6q48-6c7w-9gw2
certifi bundles emSign root CAs with compromised intermediate CA keys
Certain certifi releases bundled a root certificate with compromised intermediate keys. An attacker on the network path could issue forged certificates for any hostname and intercept or modify TLS connections.
Low
CVE-2026-59180
Apprise forwards configured auth headers across cross-origin HTTP redirects
Apprise HTTP notification plugins and loaders follow redirects by default while re-sending configured authentication headers. If a configured destination is compromised or subjected to a man-in-the-middle attack, secrets can be leaked to an arbitrary cross-origin host.
Medium
CVE-2026-105743
Docling has SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)
Medium
CVE-2026-97688
urllib3: Chunked Deflate streaming can enter an infinite loop
High
CVE-2026-97689
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
High
CVE-2026-97687
urllib3: HTTPS proxy TLS configuration may be ignored or overridden
Medium
CVE-2026-46526
local-deep-research has an SSRF bypass in `safe_get`
Medium
CVE-2026-44502
Bunsink has an SSRF bypass in `validate_webhook_url`
Medium
CVE-2026-25960
vLLM has SSRF Protection Bypass
High
CVE-2026-24779
vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector
High
CVE-2026-21441
Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)
High
CVE-2025-66471
urllib3 streaming API improperly handles highly compressed data
High
CVE-2025-66418
urllib3 allows an unbounded number of links in the decompression chain
Medium
CVE-2025-50182
urllib3 does not control redirects in browsers and Node.js
Medium
CVE-2025-50181
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
Medium
CVE-2024-37891
urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects
High
CVE-2026-44432
urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API
High
CVE-2026-44431
urllib3: Sensitive headers forwarded across origins in proxied low-level redirects
Medium
CVE-2023-45803
urllib3's request body not stripped after redirect from 303 status changes request method to GET
Medium
CVE-2018-25091
urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in t
High
CVE-2023-43804
`Cookie` HTTP header isn't stripped on cross-origin redirects
Medium
CVE-2023-32681
Unintended leak of Proxy-Authorization header in requests
Medium
CVE-2016-9015
Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates. This places users of the li
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.