01 Record

CVE-2026-54770

WebOb: Open redirect in Location header normalization via leading C0 control / space characters

MediumPUBLISHEDCNA: GitHub_M

Base score6.1 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

02 Description

WebOb: Open redirect in Location header normalization via leading C0 control / space characters

Published

2026-08-20 16:31Z1 DAY AGO

Last updated

2026-08-20 16:31Z1 DAY AGO

Reserved

2026-06-15

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

Medium (CVSS 6.1)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

d807c2473befbe29d5b7748cab50406f9e993a12ffdcafb3e805abfbf6cab063

VendorProductVersionsPlatforms

Pylonswebob< 1.8.11—