GHSA-w7gf-rpqw-gx4f
GitHub Security Advisory
⚠ Unreviewed
HIGH
Has CVE
Advisory Details
http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request.
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: September 30, 2025 6:30 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.