CVE-2019-11236
MediumAdvisory
Published 15 Apr 2019In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.1
- base score, highest
- EPSS
- 0.021
- 80th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 113
- of 17,781 indexed, latest versions
- Container images
- 107
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Improper Neutralization of CRLF Sequences in urllib3 library for Python
Carried by container images the latest versions of 113 of 17,781 indexed charts deploy, on 107 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| urllib3pypi | 1.7.1, 1.10.2, 1.13.1, 1.19.1+6 more | 1.24.3 | 107 |
| python-urllib3deb | 1.7.1-1build1, 1.7.1-1ubuntu4, 1.13.1-2ubuntu0.16.04.1, 1.13.1-2ubuntu0.16.04.2 | 1.7.1-1ubuntu4.1+esm1, 1.13.1-2ubuntu0.16.04.3 | 6 |
- OSV records
- GHSA-r64q-w8jr-g9qpUBUNTU-CVE-2019-11236
- Also known as
- PYSEC-2019-132, USN-3990-1, USN-3990-2
Charts affected
113 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| portalsmo-helm-chart | 6.0.0 | 1 of 8See more | 27,477 |
| sdcsmo-helm-chart | 6.0.0 | 1 of 14See more | 25,769 |
| sdnc-ansible-serversmo-helm-chart | 6.0.0 | 1 of 3See more | 25,769 |
| sdnc-portalsmo-helm-chart | 6.0.0 | 1 of 3See more | 25,769 |
| sdnc-promsmo-helm-chart | 6.0.0 | 1 of 2See more | 24,776 |
| sdnc-websmo-helm-chart | 6.0.0 | 1 of 3See more | 24,776 |
| ueb-listenersmo-helm-chart | 6.0.0 | 1 of 3See more | 25,769 |
| allurestakaterVerified publisher | 1.0.1 | 1 of 1See more | 28,165 |
| icinga2-reportsvtech-public-helm-charts | 1.0.0 | 1 of 1See more | 1,779 |
| swr-cache-proxyswr-cache-proxy | 0.2.0 | 1 of 1See more | 13,719 |
| kongwallarmVerified publisher | 4.6.3 | 1 of 7See more | 11,405 |
| ceph-csi-cephfswikimedia | 0.1.8 | 1 of 5See more | 10,285 |
| ceph-csi-rbdwikimedia | 0.1.13 | 1 of 6See more | 11,784 |
Container images carrying it
107 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| oomk8s/ | 875814cc853d | urllib3 | 1.24.3 | 11 |
| oomk8s/ | 7daa08b81954 | urllib3 | 1.24.3 | 6 |
| quay.io/ | a7dff785d821 | urllib3 | 1.24.3 | 3 |
| hjacobs/ | 58221b57d4d2 | urllib3 | 1.24.3 | 2 |
| istio/ | 0a5eb4795952 | urllib3 | 1.24.3 | 2 |
| istio/ | 22a0410f35a8 | urllib3 | 1.24.3 | 2 |
| omecproject/ | cfdb566dd949 | urllib3 | 1.24.3 | 2 |
| wurstmeister/ | 7a7fd44a7210 | python-urllib3 urllib3 | 1.7.1-1ubuntu4.1+esm1 1.24.3 | 2 |
| quay.io/ | f7f8228f17cc | urllib3 | 1.24.3 | 2 |
| quay.io/ | 464a3af4dfe0 | urllib3 | 1.24.3 | 2 |
| quay.io/ | bb5e052770e5 | urllib3 | 1.24.3 | 2 |
| akeyless/ | 4ba8900a0061 | urllib3 | 1.24.3 | 1 |
| amancevice/ | c8c04bfe3d66 | urllib3 | 1.24.3 | 1 |
| amundsendev/ | 99dda9502c3e | urllib3 | 1.24.3 | 1 |
| anchore/ | bde9eedf639d | urllib3 | 1.24.3 | 1 |
| andrianrf/ | 047a7837651e | urllib3 | 1.24.3 | 1 |
| apache/ | 9f895c8ae371 | urllib3 | 1.24.3 | 1 |
| apecloud/ | ff2858eab9cc | urllib3 | 1.24.3 | 1 |
| aquasec/ | 0bf607ce9308 | urllib3 | 1.24.3 | 1 |
| billimek/ | 801bba1228ac | urllib3 | 1.24.3 | 1 |
| billimek/ | bf8158556035 | urllib3 | 1.24.3 | 1 |
| blacktop/ | fc5e68e2f5ab | urllib3 | 1.24.3 | 1 |
| camptocamp/ | bff736b15623 | urllib3 | 1.24.3 | 1 |
| camptocamp/ | 2924b43dbf40 | urllib3 | 1.24.3 | 1 |
| ceph/ | 90f30824a96e | urllib3 | 1.24.3 | 1 |
| daskdev/ | 4ecd7bc35500 | urllib3 | 1.24.3 | 1 |
| daskdev/ | 052630f5ca04 | urllib3 | 1.24.3 | 1 |
| deconzcommunity/ | 6541bbb78952 | urllib3 | 1.24.3 | 1 |
| elastichq/ | bb3bd22c2b87 | urllib3 | 1.24.3 | 1 |
| fiware/ | 3c490a746f65 | urllib3 | 1.24.3 | 1 |
| fossology/ | 8bd1f22ba7bb | urllib3 | 1.24.3 | 1 |
| galaxy/ | 0267bad550e6 | python-urllib3 urllib3 | 1.7.1-1ubuntu4.1+esm1 1.24.3 | 1 |
| galaxy/ | 8e577a626dfd | python-urllib3 urllib3 | 1.7.1-1ubuntu4.1+esm1 1.24.3 | 1 |
| getsentry/ | 6ac37974fd2a | urllib3 | 1.24.3 | 1 |
| greenbirdit/ | e99d53bdc944 | urllib3 | 1.24.3 | 1 |
| gurolakman/ | ed8fd2062548 | urllib3 | 1.24.3 | 1 |
| gurolakman/ | 9abb3882bcbd | urllib3 | 1.24.3 | 1 |
| gurolakman/ | 6537e8ed8de8 | urllib3 | 1.24.3 | 1 |
| gurolakman/ | ce23b20a8a17 | urllib3 | 1.24.3 | 1 |
| gurolakman/ | b22e746edd5d | urllib3 | 1.24.3 | 1 |
| gurolakman/ | bf18525c5ad9 | urllib3 | 1.24.3 | 1 |
| gurolakman/ | 8739565c3ea2 | urllib3 | 1.24.3 | 1 |
| ibmcom/ | d28bf361327a | urllib3 | 1.24.3 | 1 |
| kiwigrid/ | 899ccd0b1f54 | urllib3 | 1.24.3 | 1 |
| kocolosk/ | 6effb982154e | urllib3 | 1.24.3 | 1 |
| kubeaws/ | c9cd2ba4373a | urllib3 | 1.24.3 | 1 |
| kubesphere/ | 378f49ec9c44 | urllib3 | 1.24.3 | 1 |
| kubesphere/ | b8ad79759bcd | urllib3 | 1.24.3 | 1 |
| library/ | ee75c9a737e7 | urllib3 | 1.24.3 | 1 |
| linuxserver/ | 89cd8d5fb1ac | urllib3 | 1.24.3 | 1 |