A vulnerability in python-urllib3 versions prior to 1.26.18-11.oe2403sp3 causes target-server TLS settings to be incorrectly applied to HTTPS proxy connections. This allows an attacker who can intercept and impersonate the HTTPS proxy to observe or modify forwarded traffic or receive a target TLS client certificate. The issue is fixed in version 1.26.18-11.oe2403sp3.