Open Redirect Attack

WebOb is vulnerable to Open Redirect Attack. The vulnerability is due to improper handling of URLs by the urlparse within the response.py, which interprets URLs starting with // as lacking a scheme, causing the urljoin to incorrectly replace the original hostname...

Information Disclosure

django is vulnerable to information disclosure. The vulnerability exits in setheaders function in response.py because the user input for filename in Content-Disposition header is not escaped which allows an attacker to download and gain access to information in the file system...