Title: [CVE-2026-0865] wsgiref.headers.Headers allows header newline injection
Jan. 20, 2026
9:27 p.m.
There is a MEDIUM severity vulnerability affecting CPython.
User-controlled header names and values containing newlines can allow injecting HTTP headers.
Please see the linked CVE ID for the latest information on affected versions:
https://www.cve.org/CVERecord?id=CVE-2026-0865 https://github.com/python/cpython/pull/143917
27
Age (days ago)
27
Last active (days ago)
0 comments
1 participants
participants (1)
-
Seth Larson