Lucene search

K
osvGoogleOSV:CVE-2021-33503
HistoryJun 29, 2021 - 11:15 a.m.

CVE-2021-33503

2021-06-2911:15:07
Google
osv.dev
9

0.003 Low

EPSS

Percentile

69.2%

An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.