https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:09:53 +0000 https://vulnerability.circl.lu/vuln/cve-2024-11168 <p><strong>Affected:</strong> Python Software Foundation CPython, python_software_foundation cpython</p> <p>The urllib.parse.urlsplit() and urlparse() functions improperly validated bracketed hosts (`[]`), allowing hosts that weren&#39;t IPv6 or IPvFuture. This behavior was not conformant to RFC 3986 and potentially enabled SSRF if a URL is processed by more than one URL parser.</p> <p><strong>Affected:</strong> Python Software Foundation CPython, python_software_foundation cpython</p> <p>The urllib.parse.urlsplit() and urlparse() functions improperly validated bracketed hosts (`[]`), allowing hosts that weren&#39;t IPv6 or IPvFuture. This behavior was not conformant to RFC 3986 and potentially enabled SSRF if a URL is processed by more than one URL parser.</p> https://vulnerability.circl.lu/vuln/cve-2024-11168 https://vulnerability.circl.lu/vuln/usn-7218-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: python3.8, Ubuntu:22.04:LTS: python3.10</p> <p>It was discovered that Python incorrectly handled parsing bracketed hosts. A remote attacker could possibly use this issue to perform a Server-Side Request Forgery (SSRF) attack.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: python3.8, Ubuntu:22.04:LTS: python3.10</p> <p>It was discovered that Python incorrectly handled parsing bracketed hosts. A remote attacker could possibly use this issue to perform a Server-Side Request Forgery (SSRF) attack.</p> https://vulnerability.circl.lu/vuln/usn-7218-1