Threats Tagged 'cve-2026-0672'
View all threats tagged with 'cve-2026-0672'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-0672'
Click on any threat for detailed analysis and mitigation recommendations
0 This security update for Python 3.13 addresses multiple header injection vulnerabilities affecting email and HTTP header processing. The issues include injection via long email comments, user-controlled data URLs, cookie values, and improper newline quoting during email serialization. The update also includes various bug fixes and performance improvements unrelated to security. No explicit patch status is provided, but the update to version 3.13.12 indicates these vulnerabilities have been fixed in that release. Join the discussion | GCVE Database | 02/19/2026, 10:31:04 UTC Added: 09/17/2026, 01:59:50 UTC |
When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters. Join the discussion | CVE Database V5 | 01/20/2026, 21:52:33 UTC Added: 01/20/2026, 22:06:07 UTC |
0 If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables. Join the discussion | GCVE Database | 12/05/2025, 11:13:34 UTC Added: 05/27/2026, 21:15:15 UTC |
Showing 1 to 3 of 3 results