Lucene search
GoogleOSV:PYSEC-2020-148HistorySep 30, 2020 - 6:15 p.m.
PYSEC-2020-148
2020-09-3018:15:00
Google
osv.dev
72
0.004 Low
EPSS
Percentile
74.7%
urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.
Related
ubuntucve
ubuntucve
CVE-2020-26137
2020-09-30 00:00:00
CVE-2020-26116
2020-09-27 00:00:00
nessus
nessus
openSUSE 15 Security Update : aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3 (openSUSE-SU-2021:1206-1)
2021-08-28 00:00:00
EulerOS 2.0 SP9 : python-urllib3 (EulerOS-SA-2021-2565)
2021-09-27 00:00:00
SUSE SLED12 / SLES12 Security Update : python-urllib3 (SUSE-SU-2021:3251-1)
2021-09-30 00:00:00
cve
cve
CVE-2020-26137
2020-09-30 18:15:26
CVE-2020-26116
2020-09-27 04:15:11
cvelist
cvelist
CVE-2020-26137
2020-09-29 00:00:00
CVE-2020-26116
2020-09-27 00:00:00
osv
osv
CRLF injection in urllib3
2021-06-18 18:46:43
CVE-2020-26137
2020-09-30 18:15:26
Moderate: python27:2.7 security and bug fix update
2021-05-18 06:02:07
nvd
nvd
CVE-2020-26137
2020-09-30 18:15:26
CVE-2020-26116
2020-09-27 04:15:11
openvas
openvas
Huawei EulerOS: Security Advisory for python-urllib3 (EulerOS-SA-2021-2565)
2021-09-28 00:00:00
Huawei EulerOS: Security Advisory for python-urllib3 (EulerOS-SA-2021-2541)
2021-09-28 00:00:00
CentOS: Security Advisory for python (CESA-2022:5235)
2022-08-03 00:00:00
prion
prion
Crlf injection
2020-09-30 18:15:00
Crlf injection
2020-09-27 04:15:00
github
github
CRLF injection in urllib3
2021-06-18 18:46:43
f5
f5
K000133547 : Python urllib3 vulnerability CVE-2020-26137
2023-04-18 00:00:00
K000133759 : Python vulnerability CVE-2020-26116
2023-05-08 00:00:00
alpinelinux
alpinelinux
CVE-2020-26137
2020-09-30 18:15:26
debiancve
debiancve
CVE-2020-26137
2020-09-30 18:15:26
CVE-2020-26116
2020-09-27 04:15:11
centos
centos
python, tkinter security update
2022-08-02 19:15:12
redhat
redhat
(RHSA-2022:5235) Moderate: python security update
2022-06-28 07:52:39
(RHSA-2021:1761) Moderate: python27:2.7 security and bug fix update
2021-05-18 06:02:07
oraclelinux
oraclelinux
python security update
2022-07-02 00:00:00
python27:2.7 security and bug fix update
2021-05-25 00:00:00
python-urllib3 security update
2021-05-25 00:00:00
almalinux
almalinux
Moderate: python27:2.7 security and bug fix update
2021-05-18 06:02:07
Moderate: python-urllib3 security update
2021-05-18 05:42:27
Moderate: python38:3.8 security update
2021-05-18 06:18:31
rocky
rocky
python27:2.7 security and bug fix update
2021-05-18 06:02:07
python-urllib3 security update
2021-05-18 05:42:27
python38:3.8 security update
2021-05-18 06:18:31
amazon
amazon
Medium: python-urllib3
2021-06-16 20:37:00
Medium: python27, python34, python35
2020-11-16 17:59:00
Medium: python
2021-06-16 20:37:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to CRLF injection in Python urllib3 [CVE-2020-26137]
2024-02-29 20:30:41
suse
suse
Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3 (moderate)
2021-08-23 00:00:00
Security update for python-urllib3 (moderate)
2020-12-18 00:00:00
Security update for python-urllib3 (moderate)
2020-12-13 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-26137 affecting package python-urllib3 1.24.2-2
2021-08-11 06:39:25
CVE-2020-26116 affecting package python3 3.7.7-2
2021-07-08 21:56:42
mageia
mageia
Updated python-urllib3 packages fix security vulnerability
2021-01-25 18:25:52
Updated python-pip packages fix security vulnerabilities
2021-01-25 18:25:52
ubuntu
ubuntu
urllib3 vulnerability
2020-10-05 00:00:00
Python vulnerability
2020-10-14 00:00:00
veracode
veracode
Carriage-Return Line-Feed (CRLF) Injection
2020-10-01 01:43:17
CRLF Injection
2020-10-18 01:59:16
redhatcve
redhatcve
CVE-2020-26137
2020-09-29 19:03:30
CVE-2020-26116
2020-10-02 02:06:52
cloudfoundry
cloudfoundry
USN-4581-1: Python vulnerability | Cloud Foundry
2020-11-19 00:00:00
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2020-2.0-0289
2020-10-14 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2020-1.0-0332
2020-10-14 00:00:00
Important Photon OS Security Update - PHSA-2020-0332
2020-10-14 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: mingw-python3-3.8.3-7.fc32
2020-11-17 01:14:12
[SECURITY] Fedora 31 Update: python2-2.7.18-6.fc31
2020-10-30 01:15:15
[SECURITY] Fedora 33 Update: python2.7-2.7.18-6.fc33
2020-10-05 16:36:13
hackerone
hackerone
Ruby: 'net/http': HTTP Header Injection in the set_content_type method
2021-04-19 09:25:39
rosalinux
rosalinux
Advisory ROSA-SA-2023-2203
2023-08-01 12:58:39
gentoo
gentoo
Python: Multiple vulnerabilities
2021-01-24 00:00:00
debian
debian
[SECURITY] [DLA 2456-1] python3.5 security update
2020-11-19 03:44:14
[SECURITY] [DLA 3610-1] python-urllib3 security update
2023-10-08 11:06:20