Lucene search
+L

509 matches found

OSV
OSV
added 2026/09/11 5:56 a.m.8 views

BIT-PYTHON-MIN-2026-15806 `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also us...

6CVSS5.7AI score0.00407EPSS
SaveExploits0References10
Rows per page
Query Builder