Wind River Support Network

HomeDefectsLIN1021-16436

Acknowledged

LIN1021-16436 : Security Advisory - python-urllib3 - CVE-2025-50181

Created: Jun 19, 2025 Updated: Jul 4, 2025

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that disable redirects. By default, requests and botocore users are not affected. An application attempting to mitigate SSRF or open redirect vulnerabilities by disabling redirects at the PoolManager level will remain vulnerable. This issue has been patched in version 2.5.0.

CREATE(Triage):(User=lchen-cn) CVE-2025-50181 (https://nvd.nist.gov/vuln/detail/CVE-2025-50181)