---
schema_version: '1.0'
id: security-20260711-2db6ef
url: https://osv.dev/vulnerability/PYSEC-2026-141
url_hash: 2db6ef60709a5175b015ce48d848492148930977a0b1d0987b40099b10be01dc
canonical_url: https://osv.dev/vulnerability/PYSEC-2026-141
source: osv:pypa
category: security/library
category_raw: cve/library
region: null
tags:
- cve
- CVE-2026-44431
- PYSEC-2026-141
- severity:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- urllib3
- PyPI
lang: en
published_at: '2026-05-13T16:16:57Z'
fetched_at: '2026-07-11T06:37:18Z'
updated_at: '2026-07-11T06:40:39Z'
status: published
content_hash: 09a88226dd30a8f8688b79fcf1bbc86a560615371a1bedd08dfebb2f41bfa9ef
license_note: full
summary: urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0,
  cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(...,
  assert_same_host=False) still forward these sensitive headers. This vulnerability
  is fixed in 2.7.0.
summary_source: rss
summary_en: urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0,
  cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(...,
  assert_same_host=False) still forward these sensitive headers. This vulnerability
  is fixed in 2.7.0.
entities: []
key_facts: []
related: []
related_auto: []
title: CVE-2026-44431 — urllib3
---

# CVE-2026-44431 — urllib3

## TL;DR
urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.

## Key Points
- cve / CVE-2026-44431 / PYSEC-2026-141 / severity:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N / urllib3 / PyPI

## Details
**Severity:** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
**Advisory:** PYSEC-2026-141 (CVE-2026-44431)

**Affected (your watchlist):**
- `PyPI:urllib3` 2.6.3 → fixed in 2.7.0 [docker/docker-llmwiki]

**Details:**
urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.

**References:**
- https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc

_Data: OSV.dev (upstream: pypa) — https://osv.dev/vulnerability/PYSEC-2026-141_

## Source
元記事: [CVE-2026-44431 — urllib3](https://osv.dev/vulnerability/PYSEC-2026-141) — published 2026-05-13T16:16:57Z