Skip to content
OpenAdvisories

Package · PyPI

microdot

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 3.7
    CVE-2026-42874

    Microdot: HTTP response splitting in Response.set_cookie()

    Microdot is a minimalistic Python web framework. Prior to 2.6.1, the Response.set_cookie() method does not sanitize its string arguments, and in particular will not detect the presence of the \r\n sequence in them. This can be a potential source of header inj…

    miguelgrinberg microdot microdot PyPI