Skip to content
OpenAdvisories

Package · Debian

python-uvicorn

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.7

    Log Injection

    This affects all versions of package uvicorn. The request logger provided by the package is vulnerable to ASNI escape sequence injection. Whenever any HTTP request is received, the default behaviour of uvicorn is to log its details to either the console or a …