Skip to content
OpenAdvisories

Package · Ubuntu

urwid

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.3
    CVE-2026-103022

    Urwid: handle_short_request() crashes on non-ASCII POST body (UnicodeEncodeError DoS)

    Urwid is a console user interface library for Python. Prior to 4.0.7, handle_short_request() in urwid/display/web.py performs unguarded character encoding on POST input and unguarded UTF-8 decoding on polling update socket output. A remote attacker who obtain…

    urwid urwid urwid urwid Debian Ubuntu PyPI
  • High 8.1
    CVE-2026-9323

    Insecure PRNG and Information Exposure in urwid Web Display Backend

    The urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id) in Screen.start() by concatenating two random.randrange(10**9) calls that use Python's Mersenne Twister PRNG, which is not cryptographically secure. Each call co…

    urwid urwid urwid urwid Debian Ubuntu