urllib3
PyPIlatest 2.8.0 · 2026-09-15pypi.org · all 105 versions
Security advisories8
- urllib3: urllib3 streaming API improperly handles highly compressed datafixed in 2.6.0
- urllib3: Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)fixed in 2.6.3
- urllib3: urllib3: HTTPS proxy TLS configuration may be ignored or overriddenfixed in 2.8.0
- urllib3: urllib3: Chunked Deflate streaming can enter an infinite loopfixed in 2.8.0
- urllib3: urllib3 allows an unbounded number of links in the decompression chainfixed in 2.6.0
- urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiationfixed in 2.5.0
- urllib3: urllib3: Sensitive headers forwarded across origins in proxied low-level redirectsfixed in 2.7.0
- urllib3: urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memoryfixed in 2.8.0
Versions that change something
What each upgrade changes in its API
- Changes argument countsbreaks on upgrade→ 2.8.0· 5
- Changes argumentsbreaks on upgrade→ 2.8.0· 55
- Changes typesbreaks on upgrade→ 2.8.0· 26