CVE-2019-11236

ADVISORY - github

Summary

In the urllib3 library through 1.24.2 for Python, CRLF injection is possible if the attacker controls the request parameter.

EPSS Score⁠: 0.00624 (0.699)

ADVISORY - nist

Improper Neutralization of CRLF Sequences ('CRLF Injection')

ADVISORY - github

Improper Neutralization of CRLF Sequences ('CRLF Injection')

ADVISORY - gitlab

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

Improper Neutralization of CRLF Sequences ('CRLF Injection')

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

ADVISORY - redhat

Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.