CVE-2026-44432 is a vulnerability in the urllib3 library for Python, which could lead to excessive resource consumption due to improper decompression of HTTP responses. The vulnerability affects versions from 2.6.0 to before 2.7.0. An attacker could exploit this vulnerability by sending a highly compressed response, causing the client to consume high CPU and allocate a large amount of memory. The issue is [truncated]
The urllib3 library, a popular HTTP client for Python, has a vulnerability that allows cross-origin redirects to forward sensitive headers when using the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False). This issue affects versions from 1.23 to before 2.7.0. The vulnerability is fixed in version 2.7.0. Users of affected versions should update to 2.7.0 or apply comp [truncated]
