TI-2026-00646 CVE-2026-0865 · GHSA-5mc7-p6pj-r3f5
wsgiref.headers.Headers allows header newline injection
Priority LOW 27
User-controlled header names and values containing newlines can allow injecting HTTP headers.
RHSA-2026:18957
python3.11 security update
Released 2026-05-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) python3.11-3.11.13-7.el9_8, python3.11-devel-3.11.13-7.el9_8, python3.11-libs-3.11.13-7.el9_8 +1
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) python3.11-3.11.13-7.el9_8, python3.11-debug-3.11.13-7.el9_8, python3.11-idle-3.11.13-7.el9_8 +2