CVE-2020-7212
python-urllib3: inefficient algorithm allows a DoS (CPU consumption) in _encode_invalid_chars function in util/url.py
Severity
UnknownRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · March 6, 2020
Updated · June 28, 2026
Description
If provided a specially crafted URL, urllib3 could be made to encode it using an O(N^2) algorithm, when an approximately O(N) one was possible.
Statement
Red Hat Product Security does not consider this to be a vulnerability. The choice of an inefficient algorithm could cause a little more CPU time to be used than the alternative, however the difference in practice is not sufficient to cause a meaningful or even noticeable impact on the application.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
CWE-400 · Uncontrolled Resource Consumption