Ecosyste.ms: Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 0.6% on pypi.org
Top 0.1% downloads on pypi.org
Top 0.1% dependent packages on pypi.org
Top 0.1% dependent repos on pypi.org
Top 1.6% forks on pypi.org
Top 0.1% docker downloads on pypi.org

pypi.org : urllib3

HTTP library with thread-safe connection pooling, file post, and more.

Registry - Source - Documentation - JSON
purl: pkg:pypi/urllib3
Keywords: filepost, http, httplib, https, pooling, ssl, threadsafe, urllib, http-client, python, urllib3
License: MIT
Latest release: 3 months ago
First release: over 14 years ago
Dependent packages: 3,966
Dependent repositories: 422,295
Downloads: 528,741,302 last month
Stars: 3,561 on GitHub
Forks: 1,119 on GitHub
Docker dependents: 34,103
Docker downloads: 13,647,309,417
Total Commits: 3279
Committers: 360
Average commits per author: 9.108
Development Distribution Score (DDS): 0.821
More commit stats: commits.ecosyste.ms
See more repository details: repos.ecosyste.ms
Funding links: https://tidelift.com/funding/github/pypi/urllib3, https://github.com/sponsors/urllib3, https://opencollective.com/urllib3
Last synced: about 17 hours ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVwaGYtcHA3cC12YzJy

Using default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connection
Ecosystems: pypi
Packages: urllib3
Source: github
Published: about 3 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhtdjItNzlxOC1mdjZn

Uncontrolled Resource Consumption in urllib3
Ecosystems: pypi
Packages: urllib3
Source: github
Published: about 3 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1oMzMtN3JycS02NjJ3

Improper Certificate Validation in urllib3
Ecosystems: pypi
Packages: urllib3
Source: github
Published: about 5 years ago

High

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXEycTctNXBwNC13NnBn

Catastrophic backtracking in URL authority parser when passed URL containing many @ characters
Ecosystems: pypi
Packages: urllib3
Source: github
Published: almost 3 years ago

Moderate

GSA_kwCzR0hTQS1nd3ZtLTQ1Z3gtM2NmOM4AA2c6

Authorization Header forwarded on redirect
Ecosystems: pypi
Packages: urllib3
Source: github
Published: 7 months ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdxdnEtNW04Yy02ZzI0

CRLF injection in urllib3
Ecosystems: pypi
Packages: urllib3
Source: github
Published: almost 3 years ago

Low

GSA_kwCzR0hTQS12NHc1LXAyaGctOGZoNs4AAcGU

Urllib3 Incorrect Certificate Validation
Ecosystems: pypi
Packages: urllib3
Source: github
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS12ODQ1LWp4eDUtdmM5Zs4AA2MD

`Cookie` HTTP header isn't stripped on cross-origin redirects
Ecosystems: pypi
Packages: urllib3
Source: github
Published: 7 months ago

Critical

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXd3dzItdjd4ai14cmM2

Exposure of Sensitive Information to an Unauthorized Actor in urllib3
Ecosystems: pypi
Packages: urllib3
Source: github
Published: over 5 years ago

Moderate

GSA_kwCzR0hTQS1yNjRxLXc4anItZzlxcM3wRw

Improper Neutralization of CRLF Sequences in urllib3 library for Python
Ecosystems: pypi
Packages: urllib3
Source: github
Published: almost 2 years ago

Moderate

GSA_kwCzR0hTQS1nNG14LXE5dmctMjdwNM4AA2gt

urllib3's request body not stripped after redirect from 303 status changes request method to GET
Ecosystems: pypi
Packages: urllib3
Source: github
Published: 7 months ago