Skip to content
OpenAdvisories

Package · PyPI

urwid

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.3
    CVE-2026-103022

    Urwid: handle_short_request() crashes on non-ASCII POST body (UnicodeEncodeError DoS)

    Urwid is a console user interface library for Python. Prior to 4.0.7, handle_short_request() in urwid/display/web.py performs unguarded character encoding on POST input and unguarded UTF-8 decoding on polling update socket output. A remote attacker who obtain…

    urwid urwid urwid urwid Debian Ubuntu PyPI