Astra Linux – vulnerability in python2.7, pypy

In Python 3.x versions prior to 3.5.10, 3.6.x prior to 3.6.12, 3.7.x prior to 3.7.9, and 3.8.x prior to 3.8.5, CRLF injection is possible if the attacker controls the HTTP request method; this was demonstrated by inserting CR and LF control characters into the first argument of...