{
  "schema_version": 1,
  "package": "urllib3",
  "advisory": "https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc",
  "cve": "CVE-2026-44431",
  "upstream_fix": "https://github.com/urllib3/urllib3/commit/5ec0de499b9166ca71c65ab04f2a7e4eb0d66fcc",
  "releases": [
    {
      "version": "2.6.3",
      "status_for_this_cve": "affected",
      "filename": "urllib3-2.6.3-py3-none-any.whl",
      "url": "https://files.pythonhosted.org/packages/39/08/aaaad47bc4e9dc8c725e68f9d04865dbcb2052843ff09c97b08904852d84/urllib3-2.6.3-py3-none-any.whl",
      "sha256": "bf272323e553dfb2e87d9bfd225ca7b0f467b919d7bbd355436d3fd37cb0acd4",
      "metadata": "https://pypi.org/pypi/urllib3/2.6.3/json",
      "upstream_source": "https://github.com/urllib3/urllib3/blob/2.6.3/src/urllib3/connectionpool.py"
    },
    {
      "version": "2.7.0",
      "status_for_this_cve": "fixed",
      "filename": "urllib3-2.7.0-py3-none-any.whl",
      "url": "https://files.pythonhosted.org/packages/7f/3e/5db95bcf282c52709639744ca2a8b149baccf648e39c8cc87553df9eae0c/urllib3-2.7.0-py3-none-any.whl",
      "sha256": "9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897",
      "metadata": "https://pypi.org/pypi/urllib3/2.7.0/json",
      "upstream_source": "https://github.com/urllib3/urllib3/blob/2.7.0/src/urllib3/connectionpool.py"
    }
  ]
}