CVE-2019-11324: High severity Python urllib3 vulnerability
Last updated 25 August 2025
Other sources
The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the sslcontext, cacerts, or cacertsdir argument.
— GitHub
The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the sslcontext, cacerts, or cacertsdir argument.
Affected Software
Remediation
Patch Available
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2019-11324?
CVE-2019-11324 is a vulnerability in the urllib3 library for Python that mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates.
How severe is CVE-2019-11324?
CVE-2019-11324 has a severity rating of 7.5, which is considered high.
What is the impact of CVE-2019-11324?
The impact of CVE-2019-11324 is that SSL connections can succeed in situations where a verification failure should occur.
How do I fix CVE-2019-11324?
To fix CVE-2019-11324, you should update the urllib3 library for Python to version 1.24.2 or higher.
Where can I find more information about CVE-2019-11324?
You can find more information about CVE-2019-11324 at the following references: [link1], [link2], [link3].