Количество 34
Количество 34
CVE-2026-3644
The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().
CVE-2026-3644
The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().
CVE-2026-3644
The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().
CVE-2026-3644
Incomplete control character validation in http.cookies
CVE-2026-3644
The fix for CVE-2026-0672, which rejected control characters in http.c ...
GHSA-vf33-88pf-hwp3
The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().
BDU:2026-04601
Уязвимость библиотеки http.cookies интерпретатора языка программирования Python (CPython), позволяющая нарушителю оказать влияние на конфиденциальность и целостность защищаемой информации
ROS-20260505-73-0014
Уязвимость python3.13
ROS-20260505-73-0013
Уязвимость python3.12
ROS-20260505-73-0012
Уязвимость python3.11
ROS-20260505-73-0011
Уязвимость python3.10
ROS-20260505-73-0010
Уязвимость python3
SUSE-SU-2026:1296-1
Security update for python39
SUSE-SU-2026:1206-1
Security update for python
SUSE-SU-2026:1530-1
Security update for python311
SUSE-SU-2026:1417-1
Security update for python
SUSE-SU-2026:1385-1
Security update for python3
SUSE-SU-2026:1376-1
Security update for python310
SUSE-SU-2026:1345-1
Security update for python36
SUSE-SU-2026:1292-1
Security update for python312
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-3644 The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output(). | CVSS3: 7.5 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-3644 The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output(). | CVSS3: 5.4 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-3644 The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output(). | CVSS3: 7.5 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-3644 Incomplete control character validation in http.cookies | 0% Низкий | 4 месяца назад | |
| CVE-2026-3644 The fix for CVE-2026-0672, which rejected control characters in http.c ... | CVSS3: 7.5 | 0% Низкий | 5 месяцев назад |
| GHSA-vf33-88pf-hwp3 The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output(). | CVSS3: 7.5 | 0% Низкий | 5 месяцев назад |
 | BDU:2026-04601 Уязвимость библиотеки http.cookies интерпретатора языка программирования Python (CPython), позволяющая нарушителю оказать влияние на конфиденциальность и целостность защищаемой информации | CVSS3: 7.1 | 0% Низкий | 5 месяцев назад |
 | ROS-20260505-73-0014 Уязвимость python3.13 | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
| ROS-20260505-73-0013 Уязвимость python3.12 | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
| ROS-20260505-73-0012 Уязвимость python3.11 | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
| ROS-20260505-73-0011 Уязвимость python3.10 | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
| ROS-20260505-73-0010 Уязвимость python3 | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
 | SUSE-SU-2026:1296-1 Security update for python39 | 4 месяца назад | ||
| SUSE-SU-2026:1206-1 Security update for python | 4 месяца назад | ||
| SUSE-SU-2026:1530-1 Security update for python311 | 3 месяца назад | ||
| SUSE-SU-2026:1417-1 Security update for python | 4 месяца назад | ||
| SUSE-SU-2026:1385-1 Security update for python3 | 4 месяца назад | ||
| SUSE-SU-2026:1376-1 Security update for python310 | 4 месяца назад | ||
| SUSE-SU-2026:1345-1 Security update for python36 | 4 месяца назад | ||
| SUSE-SU-2026:1292-1 Security update for python312 | 4 месяца назад |
Уязвимостей на страницу