Released urllib3 2.6.0
Published on December 5, 2025 by Illia Volochii
 📦 urllib3 2.6.0 is now available!
It fixes two high-severity security issues related to decompression of response content.
Additionally, the new version:
It fixes two high-severity security issues related to decompression of response content.
Additionally, the new version:
- switched to the `backports.zstd` package for the zstd support on Python 3.13 and before
- added explicit support for Python 3.14 and free threading
removed two deprecated methods (restored in v2.6.1)- fixed a few bugs, added new small features, and improved performance
Check details in our release notes https://github.com/urllib3/urllib3/releases/tag/2.6.0
Note that we're still raising funds for full HTTP/2 support!Â