Critical Security Update for python3.11-urllib3: Addressing Multiple Vulnerabilities
Summary
RHSA-2026:1704: Red Hat Security Advisory: python3.11-urllib3 security update. Affects python3.11-urllib3 versions < 0:1.26.12-5.el9_6.1. Fixed in 0:1.26.12-5.el9_6.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
python3.11-urllib3 is a widely used HTTP client library for Python, designed to simplify the process of making HTTP requests. It provides essential features such as connection pooling, file uploads, and support for various protocols. However, recent vulnerabilities have been identified that could potentially compromise the security of applications relying on this library.
Vulnerability Detail
The vulnerabilities identified as CVE-2025-66418, CVE-2025-66471, and CVE-2026-21441 pose significant risks to applications using python3.11-urllib3. These vulnerabilities stem from flaws in the library's handling of certain HTTP requests, which could allow attackers to exploit these weaknesses to execute arbitrary code, leading to unauthorized access or data breaches. The CVSS score of these vulnerabilities is 7.5, indicating a high severity level that necessitates immediate attention.
How To Fix
Minimum fixed version
0:1.26.12-5.el9_6.1
This is the first release that contains the fix.
sudo dnf update python3.11-urllib3Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, consider implementing input validation and sanitization in your application to mitigate the risks associated with these vulnerabilities. Additionally, avoid using features of the library that are known to be vulnerable until a proper update can be applied.
Conclusion
The vulnerabilities in python3.11-urllib3 present significant risks to applications utilizing this library. It is crucial to update to the latest patched version to safeguard against potential exploits. Regular monitoring and proactive management of open-source dependencies are essential for maintaining application security.
See every vulnerability recorded for python3.11-urllib3 →
FAQ
The vulnerabilities include CVE-2025-66418, CVE-2025-66471, and CVE-2026-21441, which can lead to unauthorized access and potential data breaches.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without requiring any signup.
The CVSS score for these vulnerabilities is 7.5, indicating a high severity level.
If an immediate update is not possible, implement input validation and avoid using vulnerable features until the package can be updated.
You can find more information in the Red Hat Security Advisory and on the official CVE pages for each vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for python3.11-urllib3.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
