Updated python-webob packages fix a security vulnerability

🗓️ 25 Sep 2026 05:02:40Reported by Gentoo FoundationType

mageia🔗 advisories.mageia.org👁 11 Views

Location header normalization in python-webob leads to open redirect on unix.

Reporter	Title	Published	Views	Family All 49
attackerkb	CVE-2026-44889	22 Jun 202621:30	–	attackerkb
Tenable Nessus	Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-44889)	2 Jul 202600:00	–	nessus
Tenable Nessus	openSUSE 16: python313-Markdown / python313-PyGithub / python313-WebOb / etc (openSUSE-SU-2026:21063-1)	1 Jul 202600:00	–	nessus
Tenable Nessus	SUSE SLES16: python-WebOb-doc / python313-Markdown / python313-PyGithub / etc (SUSE-SU-2026:22370-1)	2 Jul 202600:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : python-WebOb (SUSE-SU-2026:2982-1)	15 Jul 202600:00	–	nessus
Tenable Nessus	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS : WebOb vulnerabilities (USN-8759-1)	17 Sep 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-44889	24 Jun 202600:00	–	nessus
CBLMariner	CVE-2026-44889 affecting package python-webob for versions less than 1.8.10-1	8 Jul 202616:02	–	cbl_mariner
Chainguard	CVE-2026-44889 vulnerabilities	9 Jun 202619:18	–	cgr
Circl	CVE-2026-44889	23 Jun 202600:22	–	circl

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	9	noarch	python-webob	1.8.11-1.mga9	python-webob-1.8.11-1.mga9.noarch.rpm
Mageia	10	noarch	python-webob	1.8.11-1.mga10	python-webob-1.8.11-1.mga10.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
ubuntu	www.ubuntu.com/security/notices/USN-8759-1
github	www.github.com/Pylons/webob/security/advisories/GHSA-fh3h-vg37-cc95

25 Sep 2026 05:02Current

6Medium risk

Vulners AI Score6

CVSS 3.16.1

EPSS0.00269

SSVC

python-webob open redirect Location header unix