41 matches found
NewStart CGSL MAIN 7.02 : python-webob Vulnerability (NS-SA-2026-0107)
The remote NewStart CGSL host, running version MAIN 7.02, has python-webob packages installed that are affected by a vulnerability: - WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the U...
CVE-2026-54770 affecting package python-webob for versions less than 1.8.11-1
CVE-2026-54770 affecting package python-webob for versions less than 1.8.11-1. An upgraded version of the package is available that resolves this issue...
AZL-97575 CVE-2026-54770 affecting package python-webob for versions less than 1.8.11-1
WebOb provides objects for HTTP requests and responses. Prior to 1.8.11, Response.makelocationabsolute in src/webob/response.py checks a Location value for a URI scheme or leading double slash before urllib.parse.urljoin strips leading C0 control characters and spaces. An attacker-controlled valu...
[SECURITY] Fedora 43 Update: python-webob-1.8.11-1.fc43
WebOb provides wrappers around the WSGI request environment, and an object to help create WSGI responses. The objects map much of the specified behavior of HTTP, including header parsing and accessors for other standard parts of the environment...
[SECURITY] Fedora 44 Update: python-webob-1.8.11-1.fc44
WebOb provides wrappers around the WSGI request environment, and an object to help create WSGI responses. The objects map much of the specified behavior of HTTP, including header parsing and accessors for other standard parts of the environment...
Fedora 44 : python-webob (2026-7aaa63dd24)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7aaa63dd24 advisory. Update to upstream - CVE-2024-42353. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...
Fedora 43 : python-webob (2026-cd35233572)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-cd35233572 advisory. Update to upstream - CVE-2024-42353. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...
SUSE SLED15 / SLES15 Security Update : python-WebOb (SUSE-SU-2026:2982-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2982-1 advisory. This update for python-WebOb fixes the following issue - CVE-2026-44889: Location header normalization during redirect...
Security update for python-WebOb
This update for python-WebOb fixes the following issue CVE-2026-44889: Location header normalization during redirect leads to open redirect bsc1268324. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2026:2982-1 Security update for python-WebOb
This update for python-WebOb fixes the following issue - CVE-2026-44889: Location header normalization during redirect leads to open redirect bsc1268324...
CVE-2026-44889 affecting package python-webob for versions less than 1.8.10-1
CVE-2026-44889 affecting package python-webob for versions less than 1.8.10-1. An upgraded version of the package is available that resolves this issue...
SUSE-SU-2026:22370-1 Security update for python-Markdown, python-joblib, python-handy-archives, python-apache-libcloud, python-WebOb, python-PyGithub, python-soupsieve
This update for python-Markdown, python-joblib, python-handy-archives, python-apache-libcloud, python-WebOb, python-PyGithub, python-soupsieve fixes the following issues: Changes in python-Markdown: - Fix tests with latest python version bsc1268243 Changes in python-joblib: - Update to 1.5.2:...
AZL-91362 CVE-2026-44889 affecting package python-webob for versions less than 1.8.10-1
WebOb provides objects for HTTP requests and responses. Prior to 1.8.10, the normalization of the HTTP Location header during a redirect is vulnerable to an open redirect: WebOb joins the redirect target to the request URI using Python's urljoin, and since Python 3.10 the underlying urlsplit stri...
python-WebOb-doc-1.8.10-1.1 on GA media (moderate)
python-WebOb-doc-1.8.10-1.1 on GA media Announcement ID: openSUSE-SU-2026:11041-1 Rating: moderate Cross-References: CVE-2026-44889 CVSS scores: CVE-2026-44889 SUSE : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2026-44889 SUSE : 5.1...
OPENSUSE-SU-2026:11041-1 python-WebOb-doc-1.8.10-1.1 on GA media
These are all security issues fixed in the python-WebOb-doc-1.8.10-1.1 package on the GA media of openSUSE Tumbleweed...
Fedora: Security Advisory (FEDORA-2024-b4c4fd0879)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-3e0d8c04fc)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Azure Linux 3.0 Security Update: python-webob (CVE-2024-42353)
The version of python-webob installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42353 advisory. - WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header...
Amazon Linux 2 : python-webob (ALAS-2025-2726)
The version of python-webob installed on the remote host is prior to 1.2.3-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2726 advisory. WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request...