tocsin

Debian/pypy3: high 7.2

http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inse

Action: Upgrade pypy3 to 7.3.3+dfsg-1 or later.

Affected

introducedfixedlast affected
07.3.3+dfsg-1-

Fixed versions

7.3.3+dfsg-1

Sources

published · modified · JSON