urllib3 URL Parsing Issue — Bypass Blocklist

NVD Description

An issue was found in urllib3 before 1.26.15 and 2.x before 2.0.3. Urllib3 does not parse the host in a URL if it starts with leading blank characters. A specially crafted URL can bypass a blocklist or allowlist that relies on urllib3 to parse the host.

Affected Packages (1)

Public Exploits & PoCs2 found