Multiple CVEs Address URL Handling Vulnerabilities in Python Libraries
First seen 18 Feb 2026, 15:24 UTC
•
•45
Export
Article Content
Browse articles
CVE-2021-33503 affects urllib3 versions before 1.26.5, causing denial of service through catastrophic backtracking when processing URLs with excessive '@' characters. CVE-2023-26159 targets follow-redirects versions before 1.15.4, which improperly handle URLs, allowing attackers to redirect traffic to malicious sites, leading to potential phishing attacks. Both vulnerabilities require immediate attention from affected users.
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Timeline
2021-06-29
CVE-2021-33503 published
2024-01-02
CVE-2023-26159 published
2026-02-18
Information published about both vulnerabilities
More articles in this cluster
Continue Reading
Critical Appsmith Vulnerability Enables Account Takeovers
Google Chrome Zero-Day Vulnerability CVE-2025-13223 Exploited in the Wild
Lazarus Group Exploits Windows Zero-Day to Target Defense Sector
Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign
GRU Compromises Home Routers in 23 States to Steal Outlook Credentials
APT28 Exploits Zimbra Vulnerability in Ongoing Attacks Against Ukraine