Lucene search
+L

1 matches found

osv_pysec
osv_pysec
•added 2026/10/01 4:38 p.m.•32 views

PYSEC-2026-4046 djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdomain TenantResolvers to misresolve the tenant on the live path

Impact The WebSocket handlemount and ViewRuntime.buildrequest rebuild an HttpRequest via RequestFactory.get... with no HTTPHOST, so request.gethost defaulted to "testserver" on the live path. Host/subdomain/domain TenantResolvers then misresolved the tenant — None on the live path while the HTTP...

6.3CVSS5.9AI score0.00178EPSS
SaveExploits0References6
Rows per page
Query Builder