CVE-2019-11236: Python URLLIB3

Medium severity, CVSS 6.1. EPSS: 2.1% chance of exploitation in the next 30 days.

In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.

Affected products

• Python URLLIB3: up to and including 1.24.2

Published 2019-04-15. Last modified 2026-06-17.