python2-urllib3 vulnerabilities

Known vulnerabilities in the python2-urllib3 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M Incorrect Resource Transfer Between Spheres	*
M Information Exposure	*
M Information Exposure	*
M Information Exposure	*
M Information Exposure	*
L Information Exposure	<0:1.21.1-1.el7
M Improper Input Validation	<0:1.21.1-1.el7
M Improper Authentication	<0:1.21.1-1.el7
M Improper Authorization	<0:1.21.1-1.el7
M Information Exposure	<0:1.26.2-1.el7
M Cross-site Scripting (XSS)	<0:1.21.1-1.2.el7ost
M Cross-site Scripting (XSS)	<0:1.21.1-1.2.el7ost
M Cross-site Scripting (XSS)	<0:1.21.1-1.2.el7ost
M Cross-site Scripting (XSS)	<0:1.21.1-1.2.el7ost
M XML External Entity (XXE) Injection	<0:1.21.1-1.2.el7ost
M XML External Entity (XXE) Injection	<0:1.21.1-1.2.el7ost
H Missing Authorization	<0:1.26.2-1.el7
H Missing Authorization	<0:1.26.2-1.el7
H Information Exposure	<0:1.26.2-1.el7
H Missing Authorization	<0:1.26.2-1.el7
M Truncation of Security-relevant Information	<0:1.24.3-1.el7
M Information Exposure	<0:1.24.3-1.el7
H XML External Entity (XXE) Injection	<0:1.26.2-1.el7
H XML External Entity (XXE) Injection	<0:1.26.2-1.el7
M Improper Certificate Validation	<1:1.24.3-2.el7
M Use of Insufficiently Random Values	<0:1.26.2-1.el7
M Cross-site Scripting (XSS)	<0:1.21.1-1.2.el7ost
M Cross-site Scripting (XSS)	<0:1.21.1-1.2.el7ost
M HTTP Response Splitting	*
M HTTP Response Splitting	*
M HTTP Response Splitting	<0:1.26.2-1.el7
H HTTP Response Splitting	<0:1.26.2-1.el7
M Insufficiently Protected Credentials	*
M Insufficiently Protected Credentials	*
M Insufficiently Protected Credentials	*
M Insufficiently Protected Credentials	*
M Insufficiently Protected Credentials	*
M Insufficiently Protected Credentials	*
M Insufficiently Protected Credentials	*
M Insufficiently Protected Credentials	*
M HTTP Response Splitting	<0:1.24.3-1.el7
M HTTP Response Splitting	*
M HTTP Response Splitting	*
M HTTP Response Splitting	*
M HTTP Response Splitting	*
M HTTP Response Splitting	*
M HTTP Response Splitting	*
M HTTP Response Splitting	*
M HTTP Response Splitting	*
M HTTP Response Splitting	<0:1.24.3-1.el7
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Improper Certificate Validation	<0:1.24.3-1.el7
M Improper Certificate Validation	<0:1.24.3-1.el7
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*

Vulnerability

Vulnerable Version

Incorrect Resource Transfer Between Spheres