urllib3: Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)
Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API) (high). GHSA-38jv-5279-wg99, CVE-2026-21441, PYSEC-2026-1996.
osv.devquote checked
- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?