{"action":"Upgrade urllib3 to 1.24.2 or later.","affected":[{"fixed":"1.24.2","introduced":"0"}],"component":"urllib3","cve_ids":["CVE-2018-25091"],"ecosystem":"PyPI","epss":0.00589,"exploited":false,"fixed_versions":["1.24.2"],"ghsa_id":"GHSA-gwvm-45gx-3cf8","id":"tcs_01M5KFJEVX9VYJNY9DP3TE6Z0E","modified_at":"2024-11-18T23:24:00.169548Z","published_at":"2023-10-15T21:30:26Z","references":["https://osv.dev/vulnerability/GHSA-gwvm-45gx-3cf8","https://nvd.nist.gov/vuln/detail/CVE-2018-25091","https://github.com/urllib3/urllib3/issues/1510","https://github.com/urllib3/urllib3/commit/adb358f8e06865406d1f05e581a16cbea2136fbc","https://github.com/pypa/advisory-database/tree/main/vulns/urllib3/PYSEC-2023-207.yaml","https://github.com/urllib3/urllib3","https://github.com/urllib3/urllib3/compare/1.24.1...1.24.2"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-gwvm-45gx-3cf8","url":"https://osv.dev/vulnerability/GHSA-gwvm-45gx-3cf8"}],"summary":"Authorization Header forwarded on redirect"}