CVE-2026-12944

CVE-2026-12944: Langflow 1.10.0 — urllib SSRF Langflow OSS ≤ 1.10.0 — カスタムコンポーネント内の urllib.request / socket を介した任意コード実行を可能にする脆弱性。 コンポーネントスキャナーの拒否リストはこれらの標準ライブラリモジュールを検出できなかった。1.10.1 で修正済み IBM。 深刻度 : PR:L 公開再現可能 / 低深刻度 エクスプロイトエンドポイント : POST /api/v1/customcomponent セッション Cookie またはベアラートークンが必要。...

CVE-2026-2020-SSRF-via-URL-Parser-Differential

CVE-2026-2020 – URLパーサー差分によるSSRF プログラムコード（Python） root@kitploit: vulnerableservice.py - Validates URL with urllib.parse, fetches with requests from flask import Flask, request import requests import urllib.parse app = Flaskname def isallowedurlurl: parsed = urllib.parse.urlparseurl Only allow...

CVE-2023-24329-PoC

CVE-2023-24329-PoC CVE-2023-24329に関する簡潔で有益なPoC: Python urllibの解析における欠陥。 root@kitploit: git clone https://github.com/H4R335HR/CVE-2023-24329-PoC cd CVE-2023-24329-PoC python3 CVE-2023-24329-PoC.py Yebo Cao氏の研究に基づく - https://pointernull.com/security/python-url-parse-problem.html...

Security Bulletin: Incomplete Security Scanner Blocklist Enables Network-Based Code Execution

Summary A security vulnerability was identified in the code security scanner where the DANGEROUSIMPORTS blocklist incompletely addressed network-based code execution risks. While subprocess module imports were correctly blocked, socket and urllib standard library modules were omitted from the...

CVE-2026-12944 Incomplete Security Scanner Blocklist Enables Network-Based Code Execution

IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges UID=0 on the Langflow server by submitting components containing socket or urllib imports. This enables: 1 AWS credential theft via IMDSv1 SSRF with full IAM role permissions, 2 arbitra...

Astra Linux – Vulnerability in Python 3.7, Python 2.7

There is a flaw in the urllib’s AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server to which an HTTP client such as a web browser connects can trigger a Regular Expression Denial of Service ReDOS during an authentication request. This occurs when the server sends a...

Astra Linux – Vulnerability in python-django, python2.7

Packages containing “python/cpython” from versions 0 and earlier, including 3.6.13, 3.7.0 and earlier than 3.7.10, 3.8.0 and earlier than 3.8.8, 3.9.0 and earlier than 3.9.2, are vulnerable to Web Cache Poisoning via “urllib.parse.parseqsl” and “urllib.parse.parseqs”. This vulnerability occurs du...

Astra Linux – Vulnerability in Pypy

Python versions 2.7.x through 2.7.16, and 3.x through 3.7.2 are affected by improper handling of Unicode encoding with an incorrect netloc during NFKC normalization. The impact is information disclosure—credentials, cookies, etc., that are cached against a given hostname. The affected components...

BIT-PYTHON-MIN-2026-15806 `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also us...

python: Python: Information disclosure due to incorrect URL scheme matching

A flaw was found in Python. The HTTPPasswordMgr class in the urllib.request module did not correctly consider the URL scheme when matching stored credentials against a requested URL. This allowed credentials intended for an HTTPS secure connection to be sent over an unencrypted HTTP connection to...

PT-2026-84049

Name of the Vulnerable Software and Affected Versions Tornado versions prior to 6.5.8 Description Tornado parses application/x-www-form-urlencoded request bodies using urllib.parse.parse qs in tornado/escape.py without specifying the max num fields parameter. The process occurs within...

ROOT-APP-NPM-CVE-2026-55553 CVE-2026-55553 in urllib - Patched by Root

Root has patched CVE-2026-55553 in the urllib package for Root:npm. Multiple fixed versions available...

CVE-2026-55553

A flaw was found in urllib. This HTTP client for Node.js can be exploited by a remote attacker due to improper handling of cross-origin redirects. When following redirects, urllib reuses sensitive request headers, such as Authorization and Cookie, across different origins. This can lead to the...

The vulnerability in the requestInternal HTTP redirection processing function of the urllib package in the Node.js npm package stack allows attackers to access protected information.

The vulnerability of the requestInternal handling function in the urllib package of the Node.js npm package stack involves exposing confidential information to unauthorized entities. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...

CVE-2026-55553

creationtimestamp| type| source ---|---|--- 2026-08-25 18:35:14+00:00| published-proof-of-concept| https://github.com/node-modules/urllib/security/advisories/GHSA-hq3h-g68c-hp78...

CVE-2026-55553

urllib is an HTTP client for Node.js that supports authentication, redirects, timeouts, and other request features. Prior to 4.9.1 and 2.44.1, urllib follows redirects through followRedirect but reuses caller-supplied options across origins. In src/HttpClient.ts, requestInternal recursively calls...

GHSA-HQ3H-G68C-HP78 urllib's cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage

Summary urllib supports redirect-following through followRedirect, which is expected behavior for an HTTP client. The issue is that, when following a redirect to a different origin, urllib preserves the caller-supplied request headers verbatim, including credential-bearing headers such as...

NPM: urllib's cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage

NPM: urllib's cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage vulnerability discovered by ? in WordPress Npm urllib versions = 2.44.0...

@anejs/anne-migration-vue (>=2.1.0-beta.10, <=2.3.0-beta.10), @anejs/anne-plugin-qiniu (>=2.2.0-beta.1, <=2.3.0-beta.10) +344 more potentially affected by CVE-2026-55553 via urllib (>=2.0.2, <=2.41.0)

urllib NPM version =2.0.2, =2.1.0-beta.10, =2.2.0-beta.1, =0.0.1-beta.0, =0.0.1-beta.0, =0.15.0-beta.2 and more Source cves: CVE-2026-55553 Source advisory: OSV:GHSA-HQ3H-G68C-HP78...

@142vip/egg (>=0.0.1-alpha.1, <=0.0.1-alpha.6), @142vip/egg-axios (>=0.0.1-alpha.1, <=0.0.1-alpha.2) +1619 more potentially affected by CVE-2026-55553 via urllib (>=3.1.2, <=4.9.0)

urllib NPM version =3.1.2, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1-alpha.2, =0.0.1-alpha.2, =2.6.4, =1.7.0, =0.0.3, =0.0.3, =1.1.0, =1.0.12, =1.0.14, =1.0.21, =1.0.15, =1.2.17 and more Source cves: CVE-2026-55553 Source advisory: OSV:GHSA-HQ3H-G68C-HP78...