Alpine/py3-urllib3: medium 6.5
The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't g
Action: Upgrade py3-urllib3 to 1.26.4-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.26.4-r0 | - |
Fixed versions
| 1.26.4-r0 |
Sources
- osv: ALPINE-CVE-2021-28363#Alpine:v3.22/py3-urllib3
- https://security.alpinelinux.org/vuln/CVE-2021-28363
published · modified · JSON