Skip to content
OpenAdvisories

Package · Debian

python-uvicorn

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.3
    CVE-2020-7695

    HTTP Response Splitting

    Uvicorn before 0.11.7 is vulnerable to HTTP response splitting. CRLF sequences are not escaped in the value of HTTP headers. Attackers can exploit this to add arbitrary headers to HTTP responses, or even return an arbitrary response body, whenever crafted inp…

    uvicorn python-uvicorn python-uvicorn Debian Ubuntu PyPI
  • Low 3.7
    CVE-2020-7694

    Log Injection

    This affects all versions of package uvicorn. The request logger provided by the package is vulnerable to ASNI escape sequence injection. Whenever any HTTP request is received, the default behaviour of uvicorn is to log its details to either the console or a …

    uvicorn python-uvicorn python-uvicorn Debian Ubuntu PyPI