Pylons Webob
3 CVEs affecting Pylons Webob. Latest disclosed: 2026-08-20. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-54770 | Medium | 6.1 | 2026-08-20 | WebOb provides objects for HTTP requests and responses. Prior to 1.8.11, Response._make_location_absolute() in src/webob/response.py checks a Location value fo… |
CVE-2026-44889 | Medium | 6.1 | 2026-06-22 | WebOb provides objects for HTTP requests and responses. Prior to 1.8.10, the normalization of the HTTP Location header during a redirect is vulnerable to an op… |
CVE-2024-42353 | Medium | 6.1 | 2024-08-14 | WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing t… |