Safety vulnerability ID: 50732
The information on this page was manually curated by our Cybersecurity Intelligence Team.
Python 3.7.14, 3.8.14, 3.9.14 and 3.10.6 include a fix for CVE-2021-28861: Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may lead to information disclosure.
NOTE: this is disputed by a third party because the http.server.html documentation page states "Warning: http.server is not recommended for production. It only implements basic security checks."
Latest version: 0.9.8
Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. See CVE-2021-28861.
MISC:https://bugs.python.org/issue43223: https://bugs.python.org/issue43223
MISC:https://github.com/python/cpython/pull/24848: https://github.com/python/cpython/pull/24848
MISC:https://github.com/python/cpython/pull/93879: https://github.com/python/cpython/pull/93879
Scan your Python project for dependency vulnerabilities in two minutes
Scan your application