PSF-2019-3 urlsplit does not handle NFKC normalization (second fix)

🗓️ 07 Jun 2019 17:50:33Reported by GoogleType

osv🔗 osv.dev👁 33 Views

urlsplit does not handle NFKC normalization. Security regression of CVE-2019-9636 affecting python versions 2.7, 3.5, 3.6, 3.7, v3.8.0a4-v3.8.0b1, allowing an attacker to exploit CVE-2019-9636

Reporter	Title	Published	Views	Family All 253
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been addressed in IBM Security Access Manager Appliance	30 Sep 201921:15	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in python affects OS Images for Red Hat Linux Systems shipped with Cloud Pak System (CVE-2019-10160)	24 Oct 201921:37	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Python affects IBM Operations Analytics Predictive Insights (CVE-2019-10160)	28 Feb 202016:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Python security vulnerability (CVE-2019-10160)	24 Oct 201916:45	–	ibm
IBM Security Bulletins	Security Bulletin: Resilient is vulnerable to using Python component with known vulnerabilities in RHEL 7	8 Apr 202018:27	–	ibm
IBM Security Bulletins	Security Bulletin: Resilient is vulnerable to using Python component with known vulnerabilities in RHEL 7	7 Apr 202020:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in python affects IBM Watson Studio Local	20 Dec 201914:50	–	ibm
Tenable Nessus	Amazon Linux 2 : python (ALAS-2019-1258)	12 Aug 201900:00	–	nessus
Tenable Nessus	Amazon Linux 2 : python3 (ALAS-2019-1259)	12 Aug 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : python27 (ALAS-2019-1258)	13 Aug 201900:00	–	nessus

Source	Link
bugs	www.bugs.python.org/issue36742

09 Oct 2025 01:02Current

9High risk

Vulners AI Score9

CVSS 25

CVSS 3.19.8

CVSS 39.8

EPSS0.05416