Finished the TLS work for urllib3 2.0 and found CVE-2021-28363

Invoice #36264

Submitted by Quentin Pradet on March 17, 2021

Invoice items
Finished the TLS work for urllib3 2.0 (#2169, #2170, #2173, #2176, #2178, #2186, #2188), found a security vulnerability (CVE-2021-28363), a Python ssl bug ( and maintained 100% coverage (#2167, #2174) -
Date: 3/17/2021

$800.00 USD

Total amount:
$800.00 USD

payout method

Bank account

Paid from Fiscal Host

Open Source Collective

340 S. Lemon Ave. #3717 Walnut, CA, 91789

By Quentin Pradeton
Expense created
By Seth Michael Larsonon
Expense approved
By Quentin Pradeton
Expense updated
By Alina Mankoon
Expense approved
By Alina Mankoon
Expense processing
By Alina Mankoon
Expense paid

Collective balance
$4,774.96 USD

Fiscal Host
Open Source Collective

Expense policies

We process payouts twice weekly, once they have been approved by the admin of the Collective. We make payments via PayPal and Wise, and can only make payouts to countries served by these payment processors. You are not required to upload an invoice document (the data you submit in the expense form is sufficient) but if you would like to include an uploaded invoice, please make it out to: Collective Name, Open Source Collective, 340 S LEMON AVE #3717, Walnut CA 91789 USA.

Contributions that can be added as expenses include 'Adding Features', 'Fixing Bugs', and 'Reviewing Pull Requests'. The contribution should be non-trivial (fixing whitespace, etc). You don't need to be a core contributor to submit an expense. The amount billed is up to you depending on the amount of time spent and complexity of the contribution.


How do I get paid from a Collective?
Submit an expense and provide your payment information.
How are expenses approved?
Collective admins are notified when an expense is submitted, and they can approve or reject it.
Is my private data made public?
No. Only the expense amount and description are public. Attachments, payment info, emails and addresses are only visible to you and the admins.
When will I get paid?
Payments are processed by the Collective's Fiscal Host, the organization that hold funds on their behalf. Many Fiscal Hosts pay expenses weekly, but each one is different.
Why do you need my legal name?
The display name is public and the legal name is private, appearing on receipts, invoices, and other official documentation used for tax and accounting purposes.

Collective balance