{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "urllib3: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/urllib3--urllib3/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/urllib3--urllib3/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · disclosed",
   "content_text": "urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigger is that a malicious server returns Transfer-Encoding: chunked followed by a very long run of bytes without a newline. The attack mechanism is that a malicious HTTP server sends a very long unterminated chunk-size line. The impact is that unbounded memory allocation can exhaust the client process. This issue is fixed in version 2.8.0.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in AlmaLinux 10 (python3-urllib3 1.26.19-4.el10_2.2 and 1 more)",
   "content_text": "Fixed versions: python3-urllib3 1.26.19-4.el10_2.2, python3.14-urllib3 2.6.3-2.el10_2.6.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in AlmaLinux 9 (python3.12-urllib3 1.26.19-3.el9_8.2 and 1 more)",
   "content_text": "Fixed versions: python3.12-urllib3 1.26.19-3.el9_8.2, python3.14-urllib3 2.6.3-2.el9_8.6.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/amazon-linux-2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in Amazon Linux 2 (python-pip-wheel 20.2.2-1.amzn2.0.19 and 3 more)",
   "content_text": "Fixed versions: python-pip-wheel 20.2.2-1.amzn2.0.19, python-urllib3 1.25.9-1.amzn2.0.11, python2-pip 20.2.2-1.amzn2.0.19, python3-pip 20.2.2-1.amzn2.0.19.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/amazon-linux-2023",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in Amazon Linux 2023 (python3-pip 21.3.1-2.amzn2023.0.22 and 10 more)",
   "content_text": "Fixed versions: python3-pip 21.3.1-2.amzn2023.0.22, python3-pip-wheel 21.3.1-2.amzn2023.0.22, python3-urllib3 1.25.10-5.amzn2023.0.9, python3.11-pip 22.3.1-2.amzn2023.0.15, python3.11-pip-wheel 22.3.1-2.amzn2023.0.15, python3.12-pip 23.2.1-4.amzn2023.0.12, python3.12-pip-wheel 23.2.1-4.amzn2023.0.12, python3.13-pip 24.2-259.amzn2023.0.9, python3.13-pip-wheel 24.2-259.amzn2023.0.9, python3.14-pip 26.1.1-1.amzn2023.0.4, python3.14-pip-wheel 26.1.1-1.amzn2023.0.4.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in Chainguard (airflow-2 2.11.2-r26 and 133 more)",
   "content_text": "Fixed versions: airflow-2 2.11.2-r26, airflow-core-2 2.11.2-r11, ansible-operator 1.42.3-r19, ansible-operator-fips 1.42.3-r16, apache-beam-python-3.11-sdk 2.76.0-r4, apache-beam-python-3.12-sdk 2.76.0-r4, apache-beam-python-3.13-sdk 2.76.0-r4, apache-beam-python-3.14-sdk 2.76.0-r4, aws-cli-1 1.46.1-r1, awx 24.6.1-r64, awx 24.6.1-r65, commercial-gitlab-toolbox-ee-19.1 19.1.8-r1, commercial-gitlab-toolbox-ee-fips-19.1 19.1.8-r1, confluent-docker-utils 0.0.172-r4, datadog-agent-7.77-core-integrations 7.77.3-r27, datadog-agent-7.78 7.78.4-r23, datadog-agent-7.81 7.81.3-r10, datadog-agent-7.82 7.82.3-r7, datadog-agent-7.83 7.83.3-r3, datadog-agent-7.84-core-integrations 7.84.0-r1, datadog-agent-fips-7.77 7.77.3-r39, datadog-agent-fips-7.78 7.78.4-r20, datadog-agent-fips-7.80 7.80.4-r22, datadog-agent-fips-7.81 7.81.3-r13, datadog-agent-fips-7.82 7.82.3-r10, datadog-agent-fips-7.83 7.83.3-r4, datadog-agent-fips-7.84-core-integrations 7.84.2-r3, datahub-ingestion-fips 1.7.0.1-r3, graalvm-25-graalpy-venv 25.0.4.1-r5, graalvm-25-graalpy-venv 25.0.4.1-r6, jupyterhub-k8s-singleuser-sample 4.4.2-r4, jwt-tool 2.3.0-r7, keep-api-fips 0.54.3-r3, kserve-huggingfaceserver-cuda-13.3 0.21.0-r2, kserve-storage-controller 0.21.0-r2, kubeflow-pipelines-apiserver 2.17.2-r8, kubeflow-pipelines-apiserver-fips 2.17.2-r5, kubeflow-pipelines-visualization-server 2.17.2-r4, litellm 1.103.2-r2, localstack 4.14.0-r27, nemo 2.7.3-r30, nemo-rl-cuda-13.0 0.7.0-r3, nemo-rl-cuda-13.0-automodel 0.7.0-r3, nemo-rl-cuda-13.0-mcore 0.7.0-r3, nemo-rl-cuda-13.0-sglang 0.7.0-r3, nemo-rl-cuda-13.0-vllm 0.7.0-r3, open-webui 0.11.4-r3, openstack-barbican-2025.2 21.0.0_git20260928-r1, openstack-barbican-2026.1 22.0.0_git20260928-r1, openstack-ceph-config-helper-2026.1 20.2.4-r1, openstack-cinder-2026.1 28.0.0_git20260904-r6, openstack-client-2026.1 9.0.0_git20260520-r2, openstack-designate-2025.2 21.0.1_git20260817-r3, openstack-designate-2026.1 22.0.1_git20260827-r3, openstack-glance-2025.1 30.2.0_git20260912-r3, openstack-glance-2025.1-fips 30.2.0_git20260928-r2, openstack-glance-2025.2 31.1.0_git20260925-r3, openstack-glance-2025.2-fips 31.1.0_git20260925-r2, openstack-glance-2026.1 32.0.0_git20260930-r3, openstack-glance-2026.1-fips 32.0.0_git20260930-r3, openstack-heat-2025.2 25.0.1_git20260905-r2, openstack-heat-2026.1 26.0.1_git20260905-r2, openstack-horizon-2025.1 25.3.2_git20260617-r14, openstack-horizon-2025.1-fips 25.3.2_git20260617-r13, openstack-horizon-2025.2 25.5.2_git20260914-r4, openstack-horizon-2025.2-fips 25.5.2_git20260914-r3, openstack-horizon-2026.1 25.7.3_git20260924-r4, openstack-horizon-2026.1-fips 25.7.3_git20261001-r1, openstack-keystone-2025.1 27.0.1_git20260910-r4, openstack-keystone-2025.2 28.0.1_git20260902-r7, openstack-keystone-2025.2-fips 28.0.1_git20260902-r6, openstack-keystone-2026.1 29.0.1_git20260904-r10, openstack-keystone-2026.1-fips 29.0.1_git20260904-r7, openstack-kolla-toolbox-2025.1 20.6.0-r1, openstack-kolla-toolbox-2025.1-fips 20.6.0-r1, openstack-kolla-toolbox-2025.2 21.3.0-r2, openstack-kolla-toolbox-2025.2-fips 21.3.0-r1, openstack-kolla-toolbox-2026.1 22.2.0-r3, openstack-kolla-toolbox-2026.1-fips 22.2.0-r1, openstack-manila-2025.2 21.0.2_git20260923-r2, openstack-manila-2026.1 22.0.1_git20260905-r2, openstack-neutron-2026.1 28.0.2_git20260928-r5, openstack-nova-2025.1 31.3.0_git20260717-r14, openstack-nova-2025.2 32.2.0_git20260715-r16, openstack-nova-2026.1 33.0.1_git20260819-r13, openstack-octavia-2025.2 17.0.1_git20260904-r2, openstack-octavia-2026.1 18.0.1_git20260904-r2, openstack-placement-2025.1 13.0.0_git20260916-r5, openstack-placement-2025.1-fips 13.0.0_git20260916-r6, openstack-placement-2025.2 14.0.0_git20260916-r6, openstack-placement-2025.2-fips 14.0.0_git20260916-r6, openstack-placement-2026.1 15.0.0_git20260806-r12, openstack-placement-2026.1-fips 15.0.0_git20260812-r11, openstack-tempest-2025.1 43.0.0-r8, openstack-tempest-2025.2 45.0.0-r12, openstack-tempest-2026.1 46.2.0-r11, pgadmin4-fips 9.18-r4, presidio-analyzer 2.2.364-r3, py3-cassandra-medusa 0.30.1-r2, py3-hashin 1.0.5-r8, py3.10-opentelemetry-exporter-otlp 1.40.0-r3, py3.10-pip-base 26.2.1-r2, py3.10-pipenv 2026.8.0-r2, py3.11-opentelemetry-exporter-otlp 1.40.0-r3, py3.11-pip-base 26.2.1-r2, py3.11-pipenv 2026.8.0-r2, py3.12-airflow-3 3.3.2-r2, py3.12-airflow-core-3 3.3.2-r3, py3.12-airflow-postgres-fips-3 3.3.2-r2, py3.12-opentelemetry-exporter-otlp 1.40.0-r3, py3.12-pip-base 26.2.1-r2, py3.12-pipenv 2026.8.0-r2, py3.13-airflow-3 3.3.2-r2, py3.13-airflow-core-3 3.3.2-r3, py3.13-airflow-postgres-fips-3 3.3.2-r2, py3.13-opentelemetry-exporter-otlp 1.40.0-r3, py3.13-pip-base 26.2.1-r2, py3.13-pipenv 2026.8.0-r2, py3.14-airflow-3 3.3.2-r2, py3.14-airflow-core-3 3.3.2-r3, py3.14-airflow-postgres-fips-3 3.3.2-r2, py3.14-pip-base 26.2.1-r2, pypy-3.10 7.3.19-r21, request-1276 0.30.1-r2, semaphore 2.19.12-r3, spamcheck 3.5.3-r15, superset-5.0 5.0.0-r38, superset-6.0 6.0.0-r18, superset-6.1 6.1.0-r11, superset-fips-6.1 6.1.0-r7, tensorflow-cpu-jupyter 2.21.0-r11, tensorflow-gpu-jupyter 2.21.0-r11, wazuh-manager-framework 4.14.8-r6, wazuh-manager-framework-fips 4.14.8-r3.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in Debian 14 (python-urllib3 2.8.0-1)",
   "content_text": "Fixed versions: python-urllib3 2.8.0-1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/opensuse-leap-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in openSUSE Leap 16.0 (python-urllib3 2.5.0-160000.8.1)",
   "content_text": "Fixed versions: python-urllib3 2.5.0-160000.8.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in openSUSE Tumbleweed (python-urllib3 2.8.0-1.1 and 1 more)",
   "content_text": "Fixed versions: python-urllib3 2.8.0-1.1, python-urllib3_1 1.26.20-8.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed upstream (PyPI)",
   "content_text": "Fixed versions: urllib3 2.8.0.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/red-hat-enterprise-linux-10.2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in Red Hat Enterprise Linux 10.2 (python3.14-urllib3 0:2.6.3-2.el10_2.6)",
   "content_text": "Fixed versions: python3.14-urllib3 0:2.6.3-2.el10_2.6.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/red-hat-enterprise-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in Red Hat Enterprise Linux 9 (python3.14-urllib3 0:2.6.3-2.el9_8.6)",
   "content_text": "Fixed versions: python3.14-urllib3 0:2.6.3-2.el9_8.6.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in Red Hat hummingbird 1 (python-urllib3 0:2.8.0-1.hum1 and 5 more)",
   "content_text": "Fixed versions: python-urllib3 0:2.8.0-1.hum1, python3-urllib3 0:2.8.0-1.hum1, python3-urllib3+brotli 0:2.8.0-1.hum1, python3-urllib3+h2 0:2.8.0-1.hum1, python3-urllib3+socks 0:2.8.0-1.hum1, python3-urllib3+zstd 0:2.8.0-1.hum1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in Rocky Linux 10 (python3.14-urllib3 0:2.6.3-2.el10_2.6)",
   "content_text": "Fixed versions: python3.14-urllib3 0:2.6.3-2.el10_2.6.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in Rocky Linux 9 (python3.12-urllib3 0:1.26.19-3.el9_8.2 and 1 more)",
   "content_text": "Fixed versions: python3.12-urllib3 0:1.26.19-3.el9_8.2, python3.14-urllib3 0:2.6.3-2.el9_8.6.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (python-urllib3 1.25.10-150300.4.33.1 and 1 more)",
   "content_text": "Fixed versions: python-urllib3 1.25.10-150300.4.33.1, python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (python-urllib3 1.25.10-150300.4.33.1 and 1 more)",
   "content_text": "Fixed versions: python-urllib3 1.25.10-150300.4.33.1, python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (python-urllib3 1.25.10-150300.4.33.1 and 1 more)",
   "content_text": "Fixed versions: python-urllib3 1.25.10-150300.4.33.1, python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (python-urllib3 1.25.10-150300.4.33.1 and 1 more)",
   "content_text": "Fixed versions: python-urllib3 1.25.10-150300.4.33.1, python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-micro-5.3",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise Micro 5.3 (python-urllib3 1.25.10-150300.4.33.1)",
   "content_text": "Fixed versions: python-urllib3 1.25.10-150300.4.33.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-micro-5.4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise Micro 5.4 (python-urllib3 1.25.10-150300.4.33.1)",
   "content_text": "Fixed versions: python-urllib3 1.25.10-150300.4.33.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-micro-5.5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise Micro 5.5 (python-urllib3 1.25.10-150300.4.33.1)",
   "content_text": "Fixed versions: python-urllib3 1.25.10-150300.4.33.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-module-for-basesystem-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise Module for Basesystem 15 SP7 (python-urllib3 1.25.10-150300.4.33.1)",
   "content_text": "Fixed versions: python-urllib3 1.25.10-150300.4.33.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-module-for-public-cloud-12",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise Module for Public Cloud 12 (python-urllib3 1.25.10-3.54.1)",
   "content_text": "Fixed versions: python-urllib3 1.25.10-3.54.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-module-for-public-cloud-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise Module for Public Cloud 15 SP4 (python-urllib3 2.0.7-150400.7.36.1)",
   "content_text": "Fixed versions: python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-module-for-python-3-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise Module for Python 3 15 SP7 (python-urllib3 2.0.7-150400.7.36.1)",
   "content_text": "Fixed versions: python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-server-12-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise Server 12 SP5-LTSS (python-urllib3 1.25.10-3.54.1)",
   "content_text": "Fixed versions: python-urllib3 1.25.10-3.54.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise Server 15 SP4-LTSS (python-urllib3 1.25.10-150300.4.33.1 and 1 more)",
   "content_text": "Fixed versions: python-urllib3 1.25.10-150300.4.33.1, python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise Server 15 SP5-LTSS (python-urllib3 1.25.10-150300.4.33.1 and 1 more)",
   "content_text": "Fixed versions: python-urllib3 1.25.10-150300.4.33.1, python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise Server 15 SP6-LTSS (python-urllib3 1.25.10-150300.4.33.1 and 1 more)",
   "content_text": "Fixed versions: python-urllib3 1.25.10-150300.4.33.1, python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-server-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise Server 16.0 (python-urllib3 2.5.0-160000.8.1)",
   "content_text": "Fixed versions: python-urllib3 2.5.0-160000.8.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4 (python-urllib3 1.25.10-150300.4.33.1 and 1 more)",
   "content_text": "Fixed versions: python-urllib3 1.25.10-150300.4.33.1, python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5 (python-urllib3 1.25.10-150300.4.33.1 and 1 more)",
   "content_text": "Fixed versions: python-urllib3 1.25.10-150300.4.33.1, python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6 (python-urllib3 1.25.10-150300.4.33.1 and 1 more)",
   "content_text": "Fixed versions: python-urllib3 1.25.10-150300.4.33.1, python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-server-for-sap-applications-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise Server for SAP applications 16.0 (python-urllib3 2.5.0-160000.8.1)",
   "content_text": "Fixed versions: python-urllib3 2.5.0-160000.8.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-enterprise-server-ltss-extended-security-12-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 (python-urllib3 1.25.10-3.54.1)",
   "content_text": "Fixed versions: python-urllib3 1.25.10-3.54.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/suse-linux-micro-6.2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in SUSE Linux Micro 6.2 (python-urllib3 2.5.0-160000.8.1)",
   "content_text": "Fixed versions: python-urllib3 2.5.0-160000.8.1.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in Ubuntu 22.04 LTS (python-urllib3 1.26.5-1~exp1ubuntu0.8)",
   "content_text": "Fixed versions: python-urllib3 1.26.5-1~exp1ubuntu0.8.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in Ubuntu 24.04 LTS (python-urllib3 2.0.7-1ubuntu0.8)",
   "content_text": "Fixed versions: python-urllib3 2.0.7-1ubuntu0.8.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in Ubuntu 26.04 LTS (python-urllib3 2.6.3-1ubuntu1.2)",
   "content_text": "Fixed versions: python-urllib3 2.6.3-1ubuntu1.2.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/ubuntu-pro-18.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in Ubuntu Pro 18.04 LTS (python-urllib3 1.22-1ubuntu0.18.04.2+esm5)",
   "content_text": "Fixed versions: python-urllib3 1.22-1ubuntu0.18.04.2+esm5.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/ubuntu-pro-20.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in Ubuntu Pro 20.04 LTS (python-urllib3 1.25.8-2ubuntu0.4+esm6)",
   "content_text": "Fixed versions: python-urllib3 1.25.8-2ubuntu0.4+esm6.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97689/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97689/",
   "title": "CVE-2026-97689 · urllib3 · fixed in Wolfi (confluent-docker-utils 0.0.172-r4 and 21 more)",
   "content_text": "Fixed versions: confluent-docker-utils 0.0.172-r4, datadog-agent-7.77-core-integrations 7.77.3-r27, datadog-agent-7.78 7.78.4-r23, datadog-agent-7.81 7.81.3-r10, jwt-tool 2.3.0-r7, kserve-storage-controller 0.21.0-r2, kubeflow-pipelines-apiserver 2.17.2-r8, kubeflow-pipelines-visualization-server 2.17.2-r4, open-webui 0.11.4-r3, py3-cassandra-medusa 0.30.1-r2, py3.10-pip-base 26.2.1-r2, py3.10-pipenv 2026.8.0-r2, py3.11-pip-base 26.2.1-r2, py3.11-pipenv 2026.8.0-r2, py3.12-pip-base 26.2.1-r2, py3.12-pipenv 2026.8.0-r2, py3.13-pip-base 26.2.1-r2, py3.13-pipenv 2026.8.0-r2, py3.14-pip-base 26.2.1-r2, pypy-3.10 7.3.19-r21, superset-6.0 6.0.0-r18, superset-6.1 6.1.0-r11.",
   "date_published": "2026-09-29T15:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · disclosed",
   "content_text": "urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxy_ssl_context, proxy_assert_hostname, proxy_assert_fingerprint, ssl_context, cert_reqs, verify_mode, use_forwarding_for_https=True, and CERT_NONE configuration paths fail to remain separated because target-server TLS settings are incorrectly applied to the HTTPS proxy connection. The trigger is that an application uses an HTTPS proxy and configures target-server TLS settings that must remain separate from the proxy TLS handshake, including HTTPS forwarding with target-specific identity or credentials. Applying cert_reqs=CERT_NONE can overwrite proxy_ssl_context.verify_mode in place, and the mutation persists so later connections reusing the same context may connect to the HTTPS proxy without certificate verification. The attack mechanism is that an attacker intercepts and impersonates the HTTPS proxy after the effective proxy policy accepts the attacker's certificate. The impact is that the attacker can observe or modify forwarded traffic or receive a target TLS client certificate, while CONNECT tunneling still preserves the separate end-to-end target TLS connection. This issue is fixed in version 2.8.0.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in AlmaLinux 10 (python3-urllib3 1.26.19-4.el10_2.2 and 1 more)",
   "content_text": "Fixed versions: python3-urllib3 1.26.19-4.el10_2.2, python3.14-urllib3 2.6.3-2.el10_2.6.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in AlmaLinux 9 (python3.12-urllib3 1.26.19-3.el9_8.2 and 1 more)",
   "content_text": "Fixed versions: python3.12-urllib3 1.26.19-3.el9_8.2, python3.14-urllib3 2.6.3-2.el9_8.6.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in Chainguard (airflow-2 2.11.2-r26 and 134 more)",
   "content_text": "Fixed versions: airflow-2 2.11.2-r26, airflow-core-2 2.11.2-r11, ansible-operator 1.42.3-r19, ansible-operator-fips 1.42.3-r16, apache-beam-python-3.11-sdk 2.76.0-r4, apache-beam-python-3.12-sdk 2.76.0-r4, apache-beam-python-3.13-sdk 2.76.0-r4, apache-beam-python-3.14-sdk 2.76.0-r4, aws-cli-1 1.46.1-r1, awx 24.6.1-r64, awx 24.6.1-r65, commercial-gitlab-toolbox-ee-19.1 19.1.8-r1, commercial-gitlab-toolbox-ee-fips-19.1 19.1.8-r1, confluent-docker-utils 0.0.172-r4, datadog-agent-7.77-core-integrations 7.77.3-r27, datadog-agent-7.78 7.78.4-r23, datadog-agent-7.81 7.81.3-r10, datadog-agent-7.82 7.82.3-r7, datadog-agent-7.83 7.83.3-r3, datadog-agent-7.84-core-integrations 7.84.0-r1, datadog-agent-fips-7.77 7.77.3-r39, datadog-agent-fips-7.78 7.78.4-r20, datadog-agent-fips-7.80 7.80.4-r22, datadog-agent-fips-7.81 7.81.3-r13, datadog-agent-fips-7.82 7.82.3-r10, datadog-agent-fips-7.83 7.83.3-r4, datadog-agent-fips-7.84-core-integrations 7.84.2-r3, datahub-ingestion-fips 1.7.0.1-r3, graalvm-25-graalpy-venv 25.0.4.1-r5, graalvm-25-graalpy-venv 25.0.4.1-r6, jupyterhub-k8s-singleuser-sample 4.4.2-r4, jwt-tool 2.3.0-r7, keep-api-fips 0.54.3-r3, kserve-huggingfaceserver-cuda-13.3 0.21.0-r2, kserve-storage-controller 0.21.0-r2, kubeflow-pipelines-apiserver 2.17.2-r8, kubeflow-pipelines-apiserver-fips 2.17.2-r5, kubeflow-pipelines-visualization-server 2.17.2-r4, litellm 1.103.2-r2, localstack 4.14.0-r27, nemo 2.7.3-r30, nemo-rl-cuda-13.0 0.7.0-r3, nemo-rl-cuda-13.0-automodel 0.7.0-r3, nemo-rl-cuda-13.0-mcore 0.7.0-r3, nemo-rl-cuda-13.0-sglang 0.7.0-r3, nemo-rl-cuda-13.0-vllm 0.7.0-r3, open-webui 0.11.4-r3, openstack-barbican-2025.2 21.0.0_git20260928-r1, openstack-barbican-2026.1 22.0.0_git20260928-r1, openstack-ceph-config-helper-2026.1 20.2.4-r1, openstack-cinder-2026.1 28.0.0_git20260904-r6, openstack-client-2026.1 9.0.0_git20260520-r2, openstack-designate-2025.2 21.0.1_git20260817-r3, openstack-designate-2026.1 22.0.1_git20260827-r3, openstack-glance-2025.1 30.2.0_git20260912-r3, openstack-glance-2025.1-fips 30.2.0_git20260928-r2, openstack-glance-2025.2 31.1.0_git20260925-r3, openstack-glance-2025.2-fips 31.1.0_git20260925-r2, openstack-glance-2026.1 32.0.0_git20260930-r3, openstack-glance-2026.1-fips 32.0.0_git20260930-r3, openstack-heat-2025.2 25.0.1_git20260905-r2, openstack-heat-2026.1 26.0.1_git20260905-r2, openstack-horizon-2025.1 25.3.2_git20260617-r14, openstack-horizon-2025.1-fips 25.3.2_git20260617-r13, openstack-horizon-2025.2 25.5.2_git20260914-r4, openstack-horizon-2025.2-fips 25.5.2_git20260914-r3, openstack-horizon-2026.1 25.7.3_git20260924-r4, openstack-horizon-2026.1-fips 25.7.3_git20261001-r1, openstack-keystone-2025.1 27.0.1_git20260910-r4, openstack-keystone-2025.1-fips 27.0.1_git20260910-r6, openstack-keystone-2025.2 28.0.1_git20260902-r7, openstack-keystone-2025.2-fips 28.0.1_git20260902-r6, openstack-keystone-2026.1 29.0.1_git20260904-r10, openstack-keystone-2026.1-fips 29.0.1_git20260904-r7, openstack-kolla-toolbox-2025.1 20.6.0-r1, openstack-kolla-toolbox-2025.1-fips 20.6.0-r1, openstack-kolla-toolbox-2025.2 21.3.0-r2, openstack-kolla-toolbox-2025.2-fips 21.3.0-r1, openstack-kolla-toolbox-2026.1 22.2.0-r3, openstack-kolla-toolbox-2026.1-fips 22.2.0-r1, openstack-manila-2025.2 21.0.2_git20260923-r2, openstack-manila-2026.1 22.0.1_git20260905-r2, openstack-neutron-2026.1 28.0.2_git20260928-r5, openstack-nova-2025.1 31.3.0_git20260717-r14, openstack-nova-2025.2 32.2.0_git20260715-r16, openstack-nova-2026.1 33.0.1_git20260819-r13, openstack-octavia-2025.2 17.0.1_git20260904-r2, openstack-octavia-2026.1 18.0.1_git20260904-r2, openstack-placement-2025.1 13.0.0_git20260916-r5, openstack-placement-2025.1-fips 13.0.0_git20260916-r6, openstack-placement-2025.2 14.0.0_git20260916-r6, openstack-placement-2025.2-fips 14.0.0_git20260916-r6, openstack-placement-2026.1 15.0.0_git20260806-r12, openstack-placement-2026.1-fips 15.0.0_git20260812-r11, openstack-tempest-2025.1 43.0.0-r8, openstack-tempest-2025.2 45.0.0-r12, openstack-tempest-2026.1 46.2.0-r11, pgadmin4-fips 9.18-r4, presidio-analyzer 2.2.364-r3, py3-cassandra-medusa 0.30.1-r2, py3-hashin 1.0.5-r8, py3.10-opentelemetry-exporter-otlp 1.40.0-r3, py3.10-pip-base 26.2.1-r2, py3.10-pipenv 2026.8.0-r2, py3.11-opentelemetry-exporter-otlp 1.40.0-r3, py3.11-pip-base 26.2.1-r2, py3.11-pipenv 2026.8.0-r2, py3.12-airflow-3 3.3.2-r2, py3.12-airflow-core-3 3.3.2-r3, py3.12-airflow-postgres-fips-3 3.3.2-r2, py3.12-opentelemetry-exporter-otlp 1.40.0-r3, py3.12-pip-base 26.2.1-r2, py3.12-pipenv 2026.8.0-r2, py3.13-airflow-3 3.3.2-r2, py3.13-airflow-core-3 3.3.2-r3, py3.13-airflow-postgres-fips-3 3.3.2-r2, py3.13-opentelemetry-exporter-otlp 1.40.0-r3, py3.13-pip-base 26.2.1-r2, py3.13-pipenv 2026.8.0-r2, py3.14-airflow-3 3.3.2-r2, py3.14-airflow-core-3 3.3.2-r3, py3.14-airflow-postgres-fips-3 3.3.2-r2, py3.14-pip-base 26.2.1-r2, pypy-3.10 7.3.19-r21, request-1276 0.30.1-r2, semaphore 2.19.12-r3, spamcheck 3.5.3-r15, superset-5.0 5.0.0-r38, superset-6.0 6.0.0-r18, superset-6.1 6.1.0-r11, superset-fips-6.1 6.1.0-r7, tensorflow-cpu-jupyter 2.21.0-r11, tensorflow-gpu-jupyter 2.21.0-r11, wazuh-manager-framework 4.14.8-r6, wazuh-manager-framework-fips 4.14.8-r3.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in Debian 14 (python-urllib3 2.8.0-1)",
   "content_text": "Fixed versions: python-urllib3 2.8.0-1.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/opensuse-leap-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in openSUSE Leap 16.0 (python-urllib3 2.5.0-160000.8.1)",
   "content_text": "Fixed versions: python-urllib3 2.5.0-160000.8.1.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in openSUSE Tumbleweed (python-urllib3 2.8.0-1.1 and 1 more)",
   "content_text": "Fixed versions: python-urllib3 2.8.0-1.1, python-urllib3_1 1.26.20-8.1.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/pypi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed upstream (PyPI)",
   "content_text": "Fixed versions: urllib3 2.8.0.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/red-hat-enterprise-linux-10.2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in Red Hat Enterprise Linux 10.2 (python3.14-urllib3 0:2.6.3-2.el10_2.6)",
   "content_text": "Fixed versions: python3.14-urllib3 0:2.6.3-2.el10_2.6.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/red-hat-enterprise-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in Red Hat Enterprise Linux 9 (python3.14-urllib3 0:2.6.3-2.el9_8.6)",
   "content_text": "Fixed versions: python3.14-urllib3 0:2.6.3-2.el9_8.6.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in Red Hat hummingbird 1 (python-urllib3 0:2.8.0-1.hum1 and 5 more)",
   "content_text": "Fixed versions: python-urllib3 0:2.8.0-1.hum1, python3-urllib3 0:2.8.0-1.hum1, python3-urllib3+brotli 0:2.8.0-1.hum1, python3-urllib3+h2 0:2.8.0-1.hum1, python3-urllib3+socks 0:2.8.0-1.hum1, python3-urllib3+zstd 0:2.8.0-1.hum1.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in Rocky Linux 10 (python3.14-urllib3 0:2.6.3-2.el10_2.6)",
   "content_text": "Fixed versions: python3.14-urllib3 0:2.6.3-2.el10_2.6.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in Rocky Linux 9 (python3.12-urllib3 0:1.26.19-3.el9_8.2 and 1 more)",
   "content_text": "Fixed versions: python3.12-urllib3 0:1.26.19-3.el9_8.2, python3.14-urllib3 0:2.6.3-2.el9_8.6.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (python-urllib3 2.0.7-150400.7.36.1)",
   "content_text": "Fixed versions: python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (python-urllib3 2.0.7-150400.7.36.1)",
   "content_text": "Fixed versions: python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (python-urllib3 2.0.7-150400.7.36.1)",
   "content_text": "Fixed versions: python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (python-urllib3 2.0.7-150400.7.36.1)",
   "content_text": "Fixed versions: python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/suse-linux-enterprise-module-for-public-cloud-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in SUSE Linux Enterprise Module for Public Cloud 15 SP4 (python-urllib3 2.0.7-150400.7.36.1)",
   "content_text": "Fixed versions: python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/suse-linux-enterprise-module-for-python-3-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in SUSE Linux Enterprise Module for Python 3 15 SP7 (python-urllib3 2.0.7-150400.7.36.1)",
   "content_text": "Fixed versions: python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in SUSE Linux Enterprise Server 15 SP4-LTSS (python-urllib3 2.0.7-150400.7.36.1)",
   "content_text": "Fixed versions: python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in SUSE Linux Enterprise Server 15 SP5-LTSS (python-urllib3 2.0.7-150400.7.36.1)",
   "content_text": "Fixed versions: python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in SUSE Linux Enterprise Server 15 SP6-LTSS (python-urllib3 2.0.7-150400.7.36.1)",
   "content_text": "Fixed versions: python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/suse-linux-enterprise-server-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in SUSE Linux Enterprise Server 16.0 (python-urllib3 2.5.0-160000.8.1)",
   "content_text": "Fixed versions: python-urllib3 2.5.0-160000.8.1.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4 (python-urllib3 2.0.7-150400.7.36.1)",
   "content_text": "Fixed versions: python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5 (python-urllib3 2.0.7-150400.7.36.1)",
   "content_text": "Fixed versions: python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6 (python-urllib3 2.0.7-150400.7.36.1)",
   "content_text": "Fixed versions: python-urllib3 2.0.7-150400.7.36.1.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/suse-linux-enterprise-server-for-sap-applications-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in SUSE Linux Enterprise Server for SAP applications 16.0 (python-urllib3 2.5.0-160000.8.1)",
   "content_text": "Fixed versions: python-urllib3 2.5.0-160000.8.1.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/suse-linux-micro-6.2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in SUSE Linux Micro 6.2 (python-urllib3 2.5.0-160000.8.1)",
   "content_text": "Fixed versions: python-urllib3 2.5.0-160000.8.1.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in Ubuntu 22.04 LTS (python-urllib3 1.26.5-1~exp1ubuntu0.8)",
   "content_text": "Fixed versions: python-urllib3 1.26.5-1~exp1ubuntu0.8.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in Ubuntu 24.04 LTS (python-urllib3 2.0.7-1ubuntu0.8)",
   "content_text": "Fixed versions: python-urllib3 2.0.7-1ubuntu0.8.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in Ubuntu 26.04 LTS (python-urllib3 2.6.3-1ubuntu1.2)",
   "content_text": "Fixed versions: python-urllib3 2.6.3-1ubuntu1.2.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/ubuntu-pro-18.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in Ubuntu Pro 18.04 LTS (python-urllib3 1.22-1ubuntu0.18.04.2+esm5)",
   "content_text": "Fixed versions: python-urllib3 1.22-1ubuntu0.18.04.2+esm5.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/ubuntu-pro-20.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in Ubuntu Pro 20.04 LTS (python-urllib3 1.25.8-2ubuntu0.4+esm6)",
   "content_text": "Fixed versions: python-urllib3 1.25.8-2ubuntu0.4+esm6.",
   "date_published": "2026-09-29T15:30:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-97687/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-97687/",
   "title": "CVE-2026-97687 · urllib3 · fixed in Wolfi (confluent-docker-utils 0.0.172-r4 and 21 more)",
   "content_text": "Fixed versions: confluent-docker-utils 0.0.172-r4, datadog-agent-7.77-core-integrations 7.77.3-r27, datadog-agent-7.78 7.78.4-r23, datadog-agent-7.81 7.81.3-r10, jwt-tool 2.3.0-r7, kserve-storage-controller 0.21.0-r2, kubeflow-pipelines-apiserver 2.17.2-r8, kubeflow-pipelines-visualization-server 2.17.2-r4, open-webui 0.11.4-r3, py3-cassandra-medusa 0.30.1-r2, py3.10-pip-base 26.2.1-r2, py3.10-pipenv 2026.8.0-r2, py3.11-pip-base 26.2.1-r2, py3.11-pipenv 2026.8.0-r2, py3.12-pip-base 26.2.1-r2, py3.12-pipenv 2026.8.0-r2, py3.13-pip-base 26.2.1-r2, py3.13-pipenv 2026.8.0-r2, py3.14-pip-base 26.2.1-r2, pypy-3.10 7.3.19-r21, superset-6.0 6.0.0-r18, superset-6.1 6.1.0-r11.",
   "date_published": "2026-09-29T15:30:27Z"
  }
 ]
}