TI-2026-08183 CVE-2026-9323 · GHSA-83x9-8wvq-rrcpInsecure PRNG and Information Exposure in urwid Web Display BackendPriority MEDIUM 43The urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id) in Screen.start() by concatenating two random.randrange(10**9) calls that use Python's Mersenne Twister PRNG, which is not…CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00715 · Published 2026-07-18 · Partial fix CWE-338
TI-2026-86148 CVE-2026-103022Encoding errors in Urwid web display handler allow denial of servicePriority LOW 24Urwid is a console user interface library for Python.CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00472 · Published 2026-11-06 · Fixed in 4.0.7 CWE-116
