A vulnerability in python-urllib3 versions prior to 1.26.18-11.oe2403sp1 causes target-server TLS settings to be incorrectly applied to HTTPS proxy connections. This misconfiguration allows an attacker who can intercept and impersonate the HTTPS proxy to observe or modify forwarded traffic or obtain a target TLS client certificate. The issue is fixed in version 1.26.18-11.oe2403sp1.