Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Apache HTTP Server: Unsecured Data Transmission Risk
published 5 months ago
Summary
The py3-urllib3 package, used by Apache HTTP Server, has a security issue that could allow attackers to intercept sensitive data. This has been fixed in later versions of Apache HTTP Server, so it's essential to update to the latest release to ensure data remains secure. Update your Apache HTTP Server to the latest version to resolve this issue.
What to do
- Update cleanstart py3-urllib3 to version 1.26.4-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | py3-urllib3 |
< 1.26.4-r0 Fix: upgrade to 1.26.4-r0
|
Original advisory text
Security fixes for CVE-2020-26137 applied in versions: 1.25.9-r0, 1.26.17-r0, 1.26.18-r0, 1.26.4-r0
Security vulnerability affects the py3-urllib3 package. This issue is resolved in later releases. See references for vulnerability details.
Timeline
Published18 May 2026
Updated18 May 2026
First seen18 May 2026
Sources
CLEANSTART-2026-SV37938 · OSV
Track software like this
Free during beta