[{"CVE":"CVE-2020-7212","severity":null,"public_date":"2020-03-06T00:00:00Z","advisories":[],"bugzilla":"1812095","bugzilla_description":"CVE-2020-7212 python-urllib3: inefficient algorithm allows a DoS (CPU consumption) in _encode_invalid_chars function in util/url.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7212.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"CVE":"CVE-2020-26137","severity":"moderate","public_date":"2020-02-10T00:00:00Z","advisories":["RHSA-2020:4299"],"bugzilla":"1883632","bugzilla_description":"CVE-2020-26137 python-urllib3: CRLF injection via HTTP request method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["rh-python38-python-urllib3-0:1.25.7-6.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26137.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2019-11324","severity":"moderate","public_date":"2019-04-17T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:2804","RHSA-2020:1916","RHSA-2020:1605","RHBA-2020:2785","RHSA-2019:3590"],"bugzilla":"1702473","bugzilla_description":"CVE-2019-11324 python-urllib3: Certification mishandle when error should be thrown","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-295","affected_packages":["python27:2.7-8010020190903182548.51c94b97","python-urllib3-0:1.24.2-2.el8","python-urllib3-0:1.24.3-1.el7","python-pip-0:9.0.3-7.el7_7","python-pip-0:9.0.3-7.el7_8","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11324.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3_score":"7.5"},{"CVE":"CVE-2019-11236","severity":"moderate","public_date":"2019-03-13T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHBA-2020:2804","RHSA-2020:1605","RHSA-2020:0851","RHBA-2020:2785","RHSA-2019:2272","RHBA-2020:1540","RHSA-2019:3590","RHSA-2020:1916","RHSA-2020:2081"],"bugzilla":"1700824","bugzilla_description":"CVE-2019-11236 python-urllib3: CRLF injection due to not encoding the '\\r\\n' sequence leading to possible attack on internal service","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-113","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python27:2.7-8010020190903182548.51c94b97","python-urllib3-0:1.24.2-2.el8","python-urllib3-0:1.10.2-7.el7","python-urllib3-0:1.24.3-1.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11236.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2018-20060","severity":"moderate","public_date":"2018-03-26T00:00:00Z","advisories":["RHSA-2020:0850","RHSA-2020:2068","RHBA-2020:1539","RHSA-2020:1916","RHSA-2020:1605","RHSA-2020:0851","RHSA-2020:2081","RHSA-2019:2272","RHBA-2020:1540"],"bugzilla":"1649153","bugzilla_description":"CVE-2018-20060 python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-522","affected_packages":["ansible-tower-35/ansible-tower:3.5.6-1","ansible-tower-36/ansible-tower:3.6.4-1","python-urllib3-0:1.10.2-7.el7","python-pip-0:9.0.3-7.el7_7","python-virtualenv-0:15.1.0-4.el7_8","python-pip-0:9.0.3-7.el7_8","python-virtualenv-0:15.1.0-4.el7_7","python27:2.7-8020020200117110429.90f98d4f","python-pip-0:9.0.3-16.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20060.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.3"}]