https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T12:39:10.123513+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-11324 CVE-2019-11324 2026-09-28T12:39:10.176687+00:00

The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the ssl_context, ca_certs, or ca_certs_dir argument.

 https://vulnerability.circl.lu/vuln/ghsa-mh33-7rrq-662w GHSA-mh33-7rrq-662w — Improper Certificate Validation in urllib3 2026-09-28T12:39:10.176792+00:00

Affected: PyPI: urllib3

The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the `ssl_context`, `ca_certs`, or `ca_certs_dir` argument.

 https://vulnerability.circl.lu/vuln/pysec-2019-133 PYSEC-2019-133 2026-09-28T12:39:10.176848+00:00

Affected: PyPI: urllib3

The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the ssl_context, ca_certs, or ca_certs_dir argument.