Probably worth checking other implementations. The comments already mention that urllib3 is affected as well.
golang had the same bug which was fixed in this commit: https://github.com/golang/go/commit/829c5df58694b3345cb5ea41...
urllib3 is a 3rd-party library that powers requests. It tries to offer a more powerful set of features behind a better interface.