Critical Security Update for python3.14-urllib3: Addressing Vulnerabilities CVE-2026-97687 and CVE-2026-97689
Summary
RHSA-2026:84577: Red Hat Security Advisory: python3.14-urllib3 security update. Affects python3.14-urllib3 versions < 0:2.6.3-2.el9_8.6. Fixed in 0:2.6.3-2.el9_8.6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
python3.14-urllib3 is a widely used HTTP client for Python, providing essential functionalities for making HTTP requests. It is a crucial component in many applications, enabling seamless communication over the web. However, vulnerabilities in this package can expose applications to security risks, making it imperative to maintain updated versions.
Vulnerability Detail
The vulnerabilities identified as CVE-2026-97687 and CVE-2026-97689 in python3.14-urllib3 stem from flaws in the handling of HTTP requests. These vulnerabilities could allow an attacker to exploit the package, potentially leading to unauthorized access or data leakage. The severity of these vulnerabilities is underscored by a CVSS score of 7.5, indicating a high risk to systems utilizing this package.
How To Fix
Minimum fixed version
0:2.6.3-2.el9_8.6
This is the first release that contains the fix.
sudo dnf update python3.14-urllib3Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, consider implementing network-level security measures to restrict access to vulnerable components until the package can be updated. Additionally, review application logs for any suspicious activity that may indicate exploitation attempts.
Conclusion
The vulnerabilities in python3.14-urllib3 pose significant risks to applications relying on this package. It is crucial to update to the patched version to mitigate these risks. Utilize tools like Vulert to monitor for vulnerabilities and ensure your software remains secure.
See every vulnerability recorded for python3.14-urllib3 →
FAQ
These are identifiers for specific vulnerabilities found in the python3.14-urllib3 package, which could lead to unauthorized access or data leakage.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without requiring any signup.
The CVSS score for these vulnerabilities is 7.5, indicating a high severity level.
Implement network-level security measures to restrict access to vulnerable components and monitor application logs for suspicious activity.
Vulert monitors and alerts for open-source vulnerabilities in software using a manifest file like package-lock.json, providing real-time insights without requiring code access.
Related vulnerabilities
Recent vulnerabilities recorded for python3.14-urllib3.
