CVE-2026-44889 affecting package python-webob for versions less than 1.8.10-1

CVE-2026-44889 affecting package python-webob for versions less than 1.8.10-1. An upgraded version of the package is available that resolves this issue...

SUSE CVE-2026-44889

WebOb provides objects for HTTP requests and responses. Prior to 1.8.10, the normalization of the HTTP Location header during a redirect is vulnerable to an open redirect: WebOb joins the redirect target to the request URI using Python's urljoin, and since Python 3.10 the underlying urlsplit stri...