| Package | Affected versions | Patched versions |
|---|---|---|
| urllib3 | < 1.24.3 | 1.24.3 |
| urllib3 | ≤ 1.24.2 |
In the urllib3 library through 1.24.2 for Python, CRLF injection is possible if the attacker controls the request parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free