RHSA-2026:36732: Moderate: python-urllib3 security update

we found a memory exhaustion CVE in a library downloaded 29 million times a month. AWS, DataHub, and Lightning AI are in the blast radius.