CVE-2026-42874
2 advisories.
PyPI/microdot CVE-2026-42874: low 3.7
Microdot has HTTP response splitting in Response.set_cookie()
Action: Upgrade microdot to 2.6.1 or later.
pip install microdot==2.6.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.1 | - |
Fixed versions
| 2.6.1 |
Sources
- osv: GHSA-7wc8-wvc4-m498
- https://github.com/miguelgrinberg/microdot/security/advisories/GHSA-7wc8-wvc4-m498
- https://nvd.nist.gov/vuln/detail/CVE-2026-42874
- https://github.com/miguelgrinberg/microdot/commit/99b281b45faef8472410f2d56bfef496dfbd95d5
- https://github.com/miguelgrinberg/microdot
- https://github.com/miguelgrinberg/microdot/blob/main/CHANGES.md
CVE-2026-42874 · published · modified · JSON
PyPI/microdot CVE-2026-42874: low 3.7
Microdot has HTTP response splitting in Response.set_cookie()
Action: Upgrade microdot to 2.6.1 or later.
pip install microdot==2.6.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.1 | - |
Fixed versions
| 2.6.1 |
Sources
- osv: PYSEC-2026-2646
- https://github.com/miguelgrinberg/microdot/security/advisories/GHSA-7wc8-wvc4-m498
- https://nvd.nist.gov/vuln/detail/CVE-2026-42874
- https://github.com/miguelgrinberg/microdot/commit/99b281b45faef8472410f2d56bfef496dfbd95d5
- https://github.com/miguelgrinberg/microdot
- https://github.com/miguelgrinberg/microdot/blob/main/CHANGES.md
- https://pypi.org/project/microdot
- https://github.com/advisories/GHSA-7wc8-wvc4-m498
CVE-2026-42874 · published · modified · JSON