Threats tagged 'brew-toot-cve-2026-103022'

The handle_short_request() function in urwid versions up to 4.0.6 crashes with an unhandled UnicodeEncodeError when processing POST requests containing non-ASCII bytes, causing the CGI process to exit and return HTTP 500 errors. This leads to a denial of service (DoS) for legitimate users of the urwid web interface. Additionally, a file descriptor leak occurs due to missing cleanup on exception. The issue is fixed in urwid 4.0.7, and users should upgrade to this version or later.