Skip to content
OpenAdvisories
High USN-5833-1 1 CVE

python-future vulnerability

Published Jan 31, 2023 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

Sebastian Chnelik discovered that python-future incorrectly handled
certain HTTP header field. An attacker could possibly use this issue
to cause a denial of service.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS python-future 0.15.2-4ubuntu2.1
Ubuntu · 20.04 LTS 20.04:LTS python-future 0.18.2-2ubuntu0.1
Ubuntu · 22.04 LTS 22.04:LTS python-future 0.18.2-5ubuntu0.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS python-future 0.15.2-1ubuntu0.1~esm1

Vulnerabilities 1

  • High 7.5
    CVE-2022-40899

    Python Charmers Future denial of service vulnerability

    An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.

    future python-future python-future Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2022-40899