542 matches found
CVE-2026-2020-SSRF-via-URL-Parser-Differential
CVE-2026-2020 – URL 解析器差异导致的 SSRF 程序代码（Python） vulnerableservice.py - Validates URL with urllib.parse, fetches with requests from flask import Flask, request import requests import urllib.parse app = Flaskname def isallowedurlurl: parsed = urllib.parse.urlparseurl Only allow http://localhost and...
CVE-2023-24329-PoC
CVE-2023-24329-PoC 关于CVE-2023-24329的简短信息性PoC：Python urllib解析缺陷。 git clone https://github.com/H4R335HR/CVE-2023-24329-PoC cd CVE-2023-24329-PoC python3 CVE-2023-24329-PoC.py 基于Yebo Cao的研究 - https://pointernull.com/security/python-url-parse-problem.html...
CentOS Linux 7 [TuxCare] Security Update: python3 / python3-debug / python3-devel / python3-idle / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1777970333)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1777970333 advisory. - The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before...
Rocky Linux 8 [CIQ] Security Update: Cython-debugsource / PyYAML-debugsource / babel / numpy-debugsource / etc Multiple Vulnerabilities (crlsa-2022_1821)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221821 advisory. python: urllib: Regular expression DoS in AbstractBasicAuthHandler CVE-2021-3733 python: ftplib should not use the host from the PASV response CVE-2021-418...
Rocky Linux 8 [CIQ] Security Update: Cython-debugsource / PyYAML-debugsource / numpy-debugsource / etc Multiple Vulnerabilities (crlsa-2022_1764)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221764 advisory. python: urllib: Regular expression DoS in AbstractBasicAuthHandler CVE-2021-3733 python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass...
CVE-2026-12944
CVE-2026-12944: Langflow 1.10.0 — urllib SSRF Langflow OSS ≤ 1.10.0 — 该漏洞允许通过自定义组件中的 urllib.request / socket 执行任意代码。 组件扫描器的拒绝列表遗漏了这些标准库模块。已在 1.10.1 中修复（IBM）。 严重性 ：PR:L（可公开复现 / 低严重性） 利用端点 ：POST /api/v1/customcomponent 需要会话 cookie 或 bearer token。 如何获取已认证访问权限（3 种简单途径） 1. --test — 无需认证。仅执行公开的 GET...
CentOS Linux 6 [TuxCare] Security Update: python / python-devel / python-libs / python-test / python-tools / etc (CENTOS6:CLSA-2026:1777446306)
The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1777446306 advisory. - urllib in Python 2.x through 2.7.16 supports the localfile: scheme, which makes it easier for remote attackers to bypass protection mechanisms...
CentOS Linux 6 [TuxCare] Security Update: python / python-devel / python-libs / python-test / python-tools / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1778769563)
The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1778769563 advisory. - Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 may also be...
Security Bulletin: Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
Summary A security vulnerability was identified in the code security scanner where the DANGEROUSIMPORTS blocklist incompletely addressed network-based code execution risks. While subprocess module imports were correctly blocked, socket and urllib standard library modules were omitted from the...
CVE-2026-12944 Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges UID=0 on the Langflow server by submitting components containing socket or urllib imports. This enables: 1 AWS credential theft via IMDSv1 SSRF with full IAM role permissions, 2 arbitra...
Astra Linux – Vulnerability in python-django, python2.7
Packages containing “python/cpython” from versions 0 and earlier, including 3.6.13, 3.7.0 and earlier than 3.7.10, 3.8.0 and earlier than 3.8.8, 3.9.0 and earlier than 3.9.2 are vulnerable to Web Cache Poisoning via “urllib.parse.parseqsl” and “urllib.parse.parseqs”. This vulnerability occurs due...
Astra Linux – Vulnerability in Python 3.7, Python 2.7
There is a flaw in the urllib’s AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server to which an HTTP client such as a web browser connects can trigger a Regular Expression Denial of Service ReDOS during an authentication request. This occurs when the server sends a...
Astra Linux – Vulnerability in Pypy
Python versions 2.7.x through 2.7.16, and 3.x through 3.7.2 are affected by improper handling of Unicode encoding with an incorrect netloc during NFKC normalization. The impact is information disclosure—credentials, cookies, etc., that are cached against a given hostname. The affected components...
BIT-PYTHON-MIN-2026-15806 `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching
The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also us...
python: Python: Information disclosure due to incorrect URL scheme matching
A flaw was found in Python. The HTTPPasswordMgr class in the urllib.request module did not correctly consider the URL scheme when matching stored credentials against a requested URL. This allowed credentials intended for an HTTPS secure connection to be sent over an unencrypted HTTP connection to...
PT-2026-84049
Name of the Vulnerable Software and Affected Versions Tornado versions prior to 6.5.8 Description Tornado parses application/x-www-form-urlencoded request bodies using urllib.parse.parse qs in tornado/escape.py without specifying the max num fields parameter. The process occurs within...
ROOT-APP-NPM-CVE-2026-55553 CVE-2026-55553 in urllib - Patched by Root
Root has patched CVE-2026-55553 in the urllib package for Root:npm. Multiple fixed versions available...
CVE-2026-55553
A flaw was found in urllib. This HTTP client for Node.js can be exploited by a remote attacker due to improper handling of cross-origin redirects. When following redirects, urllib reuses sensitive request headers, such as Authorization and Cookie, across different origins. This can lead to the...
The vulnerability in the requestInternal HTTP redirection processing function of the urllib package in the Node.js npm package stack allows attackers to access protected information.
The vulnerability of the requestInternal handling function in the urllib package of the Node.js npm package stack involves exposing confidential information to unauthorized entities. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...
