Debian/pypy3: high 7.2
http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inse
Action: Upgrade pypy3 to 7.3.3+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.3.3+dfsg-1 | - |
Fixed versions
| 7.3.3+dfsg-1 |
Sources
published · modified · JSON