Vulnerability in Python Software Foundation Cpython

CVE-2026-1502

CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.

Vulnerability class: CRLF Injection

EPSS: 0.000 (6.9th percentile) — read the EPSS interpretation.