๐ฆ urllib3 2.5.0 is now available!
It fixes two moderate security issues:
- pool managers now properly control redirects when `retries` is passed โ CVE-2025-50181 (5.3 Medium) reported by Jacob Sandum
- redirects are now controlled by urllib3 in the Node.js runtime โ CVE-2025-50182 (5.3 Medium)
Additionally, the new version adds support for the zstd module in Python 3.14 and fixes issues related to shutting down responses and HTTP tunneling with IPv6.