GHSA-CP25-J9X5-P5XM Urwid: handle_short_request() crashes on non-ASCII POST body (UnicodeEncodeError DoS)

Summary The handleshortrequest function in urwid/display/web.py raises an unhandled UnicodeEncodeError when processing a POST request body containing non-ASCII bytes. The function reads POST input and encodes it to ASCII before writing to a named pipe. Any byte value above 0x7F causes the CGI...

EUVD-2026-118521

Urwid: handleshortrequest crashes on non-ASCII POST body UnicodeEncodeError DoS...

Urwid: handle_short_request() crashes on non-ASCII POST body (UnicodeEncodeError DoS)

Summary The handleshortrequest function in urwid/display/web.py raises an unhandled UnicodeEncodeError when processing a POST request body containing non-ASCII bytes. The function reads POST input and encodes it to ASCII before writing to a named pipe. Any byte value above 0x7F causes the CGI...

SUSE CVE-2026-103022

Urwid is a console user interface library for Python. Prior to 4.0.7, handleshortrequest in urwid/display/web.py performs unguarded character encoding on POST input and unguarded UTF-8 decoding on polling update socket output. A remote attacker who obtains a valid X-Urwid-ID session token can...

UBUNTU-CVE-2026-103022

Urwid is a console user interface library for Python. Prior to 4.0.7, handleshortrequest in urwid/display/web.py performs unguarded character encoding on POST input and unguarded UTF-8 decoding on polling update socket output. A remote attacker who obtains a valid X-Urwid-ID session token can...

CVE-2026-103022

Urwid is a console user interface library for Python. Prior to 4.0.7, handleshortrequest in urwid/display/web.py performs unguarded character encoding on POST input and unguarded UTF-8 decoding on polling update socket output. A remote attacker who obtains a valid X-Urwid-ID session token can...

CVE-2026-103022

Urwid is a console user interface library for Python. Prior to 4.0.7, handleshortrequest in urwid/display/web.py performs unguarded character encoding on POST input and unguarded UTF-8 decoding on polling update socket output. A remote attacker who obtains a valid X-Urwid-ID session token can...

Linux Distros Unpatched Vulnerability : CVE-2026-103022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Urwid is a console user interface library for Python. Prior to 4.0.7, handleshortrequest in urwid/display/web.py performs unguarded character encoding on POST...

DEBIAN-CVE-2026-103022

Urwid is a console user interface library for Python. Prior to 4.0.7, handleshortrequest in urwid/display/web.py performs unguarded character encoding on POST input and unguarded UTF-8 decoding on polling update socket output. A remote attacker who obtains a valid X-Urwid-ID session token can...

CVE-2026-103022

Urwid is a console user interface library for Python. Prior to 4.0.7, handleshortrequest in urwid/display/web.py performs unguarded character encoding on POST input and unguarded UTF-8 decoding on polling update socket output. A remote attacker who obtains a valid X-Urwid-ID session token can...

CVE-2026-103022 Urwid: handle_short_request() crashes on non-ASCII POST body (UnicodeEncodeError DoS)

Urwid is a console user interface library for Python. Prior to 4.0.7, handleshortrequest in urwid/display/web.py performs unguarded character encoding on POST input and unguarded UTF-8 decoding on polling update socket output. A remote attacker who obtains a valid X-Urwid-ID session token can...

CVE-2026-103022

Urwid is a console user interface library for Python. Prior to 4.0.7, handleshortrequest in urwid/display/web.py performs unguarded character encoding on POST input and unguarded UTF-8 decoding on polling update socket output. A remote attacker who obtains a valid X-Urwid-ID session token can...

CVE-2026-103022 Urwid: handle_short_request() crashes on non-ASCII POST body (UnicodeEncodeError DoS)

Urwid is a console user interface library for Python. Prior to 4.0.7, handleshortrequest in urwid/display/web.py performs unguarded character encoding on POST input and unguarded UTF-8 decoding on polling update socket output. A remote attacker who obtains a valid X-Urwid-ID session token can...

CVE-2026-103022

The Urwid Python console user interface library is vulnerable to a Denial of Service (DoS) condition in versions prior to 4.0.7 . The handle_short_request() function in urwid/display/web.py performs unguarded character encoding on POST input and unguarded UTF-8 decoding on polling update socket o...

CVE-2026-103022: urwid: Urwid is a console user interface library for Python

Urwid is a console user interface library for Python. Prior to 4.0.7, handleshortrequest in urwid/display/web.py performs unguarded character encoding on POST input and unguarded UTF-8 decoding on polling update socket output. A remote attacker who obtains a valid X-Urwid-ID session token can...