CVE-2025-66418

score

<0.1

cvss

7.5

epss

0.7%

published

2025-12-05

kev added

—

first seen

2026-10-21

urllib3 >= 1.24 and < 2.6.0 contains a denial of service caused by unbounded decompression chain length, letting malicious servers cause high CPU and memory usage, exploit requires interaction with malicious server.