TI-2026-17326 CVE-2026-21441 · GHSA-38jv-5279-wg99
urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)
Priority MEDIUM 50
urllib3 is an HTTP client library for Python.
RHSA-2026:2911
python-s3transfer security update
Released 2026-02-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS) python-s3transfer-0.1.13-1.el7_9.6
- Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS) python-s3transfer-0.1.13-1.el7_9.6