Количество 41
Количество 41
BDU:2026-04601
Уязвимость библиотеки http.cookies интерпретатора языка программирования Python (CPython), позволяющая нарушителю оказать влияние на конфиденциальность и целостность защищаемой информации
ROS-20260505-80-0021
Уязвимость python3.14
ROS-20260505-80-0020
Уязвимость python3.13
ROS-20260505-80-0019
Уязвимость python3.12
ROS-20260505-80-0018
Уязвимость python3.11
ROS-20260505-80-0017
Уязвимость python3.10
ROS-20260505-80-0016
Уязвимость python3.9
ROS-20260505-80-0015
Уязвимость python3.8
ROS-20260505-73-0014
Уязвимость python3.13
ROS-20260505-73-0013
Уязвимость python3.12
ROS-20260505-73-0012
Уязвимость python3.11
ROS-20260505-73-0011
Уязвимость python3.10
ROS-20260505-73-0010
Уязвимость python3
CVE-2026-3644
The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().
CVE-2026-3644
The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().
CVE-2026-3644
The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().
CVE-2026-3644
Incomplete control character validation in http.cookies
CVE-2026-3644
The fix for CVE-2026-0672, which rejected control characters in http.c ...
GHSA-vf33-88pf-hwp3
The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().
SUSE-SU-2026:1296-1
Security update for python39
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-04601 Уязвимость библиотеки http.cookies интерпретатора языка программирования Python (CPython), позволяющая нарушителю оказать влияние на конфиденциальность и целостность защищаемой информации | CVSS3: 7.1 | 0% Низкий | 6 месяцев назад |
 | ROS-20260505-80-0021 Уязвимость python3.14 | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
| ROS-20260505-80-0020 Уязвимость python3.13 | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
| ROS-20260505-80-0019 Уязвимость python3.12 | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
| ROS-20260505-80-0018 Уязвимость python3.11 | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
| ROS-20260505-80-0017 Уязвимость python3.10 | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
| ROS-20260505-80-0016 Уязвимость python3.9 | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
| ROS-20260505-80-0015 Уязвимость python3.8 | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
| ROS-20260505-73-0014 Уязвимость python3.13 | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
| ROS-20260505-73-0013 Уязвимость python3.12 | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
| ROS-20260505-73-0012 Уязвимость python3.11 | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
| ROS-20260505-73-0011 Уязвимость python3.10 | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
| ROS-20260505-73-0010 Уязвимость python3 | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
 | CVE-2026-3644 The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output(). | CVSS3: 7.5 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-3644 The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output(). | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-3644 The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output(). | CVSS3: 7.5 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-3644 Incomplete control character validation in http.cookies | CVSS3: 7.5 | 0% Низкий | 6 месяцев назад |
| CVE-2026-3644 The fix for CVE-2026-0672, which rejected control characters in http.c ... | CVSS3: 7.5 | 0% Низкий | 6 месяцев назад |
| GHSA-vf33-88pf-hwp3 The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output(). | CVSS3: 7.5 | 0% Низкий | 6 месяцев назад |
 | SUSE-SU-2026:1296-1 Security update for python39 | 5 месяцев назад |
Уязвимостей на страницу