Threats Tagged 'brew-pdfly-cve-2026-97687'

A vulnerability in urllib3 versions 1.26.0 through 2.7.0 causes improper separation of TLS configurations between HTTPS proxies and target servers. This can result in the proxy TLS connection using the target server's SSL context and certificate verification policies, potentially disabling proxy certificate verification. An attacker intercepting the HTTPS proxy connection could impersonate the proxy, exposing sensitive data and client TLS identity information. The issue affects HTTPS forwarding proxy configurations and is fixed in urllib3 version 2.8.0 and later.