馃摝 urllib3 2.6.3 is now available!

This release continues our recent series of decompression-related security fixes by mitigating decompression bombs in HTTP redirect responses (see GHSA-38jv-5279-wg99).

Also, the new version avoids indefinite sleeps with big Retry-After values and improves compatibility with popular dependents in Emscripten environments.

github.com/urllib3/urllib3/rel

0

If you have a fediverse account, you can quote this note from your own instance. Search https://mastodon.social/users/illiav/statuses/115854841600237427 on your instance and quote it. (Note that quoting is not supported in Mastodon.)