Critical Security Update for python3.11-urllib3: Addressing Multiple Vulnerabilities
Summary
RHSA-2026:1676: Red Hat Security Advisory: python3.11-urllib3 security update. Affects python3.11-urllib3 versions < 0:1.26.12-1.el8_8.3. Fixed in 0:1.26.12-1.el8_8.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
python3.11-urllib3 is a widely used HTTP client library for Python, enabling developers to send HTTP requests easily. It is essential for applications that require reliable and efficient network communication. However, recent vulnerabilities have been identified that could compromise the security of applications relying on this library.
Vulnerability Detail
The vulnerabilities identified as CVE-2025-66418, CVE-2025-66471, and CVE-2026-21441 expose applications using python3.11-urllib3 to potential security risks. These vulnerabilities could allow attackers to exploit weaknesses in the library, leading to unauthorized access, data leakage, or denial of service. The vulnerabilities stem from improper handling of certain requests and responses, making it crucial for users to address them promptly.
How To Fix
Minimum fixed version
0:1.26.12-1.el8_8.3
This is the first release that contains the fix.
sudo dnf update python3.11-urllib3Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider limiting the use of the affected library in your application until the update can be applied. Additionally, review your application’s network request handling to mitigate potential risks.
Conclusion
The vulnerabilities in python3.11-urllib3 pose significant risks to applications relying on this library. It is essential to update to the patched version to ensure the security and integrity of your applications. Regular monitoring for vulnerabilities using tools like Vulert can help maintain a secure software environment.
See every vulnerability recorded for python3.11-urllib3 →
FAQ
python3.11-urllib3 is an HTTP client library for Python that simplifies sending HTTP requests and handling responses.
The vulnerabilities are CVE-2025-66418, CVE-2025-66471, and CVE-2026-21441, which could lead to unauthorized access and data leakage.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
The CVSS score for these vulnerabilities is 7.5, indicating a high severity level.
You can update the package by running 'sudo yum update python3.11-urllib3' in your terminal.
Related vulnerabilities
Recent vulnerabilities recorded for python3.11-urllib3.
