Skip to content
OpenAdvisories

Package · Ubuntu

urwid

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    Urwid: handle_short_request() crashes on non-ASCII POST body (UnicodeEncodeError DoS)

    Urwid is a console user interface library for Python. Prior to 4.0.7, handle_short_request() in urwid/display/web.py performs unguarded character encoding on POST input and unguarded UTF-8 decoding on polling update socket output. A remote attacker who obtain…