CVE-2026-1502
ADVISORY - nistSummary
CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.
EPSS Score: 0.00061 (0.188)
Common Weakness Enumeration (CWE)
ADVISORY - nist
Improper Neutralization of CRLF Sequences ('CRLF Injection')
Docker
CREATED
UPDATED
ADVISORY ID
CVE-2026-1502
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
| Package | Type | OS Name | OS Version | Affected Ranges | Fix Versions |
|---|---|---|---|---|---|
| python | dhi | - | - | <3.14.5-rc1 | 3.14.5-rc1 |
| alpine/python-3.10 | apk | alpine | 3.23 | <3.14.5-rc1 | 3.14.5-rc1 |
| alpine/python-3.10 | apk | alpine | 3.23 | >=3.15.0-alpha1,<3.15.0-beta1 | 3.15.0-beta1 |
| alpine/python-3.11 | apk | alpine | 3.23 | <3.14.5-rc1 | 3.14.5-rc1 |
| alpine/python-3.11 | apk | alpine | 3.23 | >=3.15.0-alpha1,<3.15.0-beta1 | 3.15.0-beta1 |
| alpine/python-3.12 | apk | alpine | 3.23 | <3.14.5-rc1 | 3.14.5-rc1 |
| alpine/python-3.12 | apk | alpine | 3.23 | >=3.15.0-alpha1,<3.15.0-beta1 | 3.15.0-beta1 |
| alpine/python-3.13 | apk | alpine | 3.23 | <3.14.5-rc1 | 3.14.5-rc1 |
| alpine/python-3.13 | apk | alpine | 3.23 | >=3.15.0-alpha1,<3.15.0-beta1 | 3.15.0-beta1 |
| alpine/python-3.14 | apk | alpine | 3.23 | <3.14.5-rc1 | 3.14.5-rc1 |
| alpine/python-3.14 | apk | alpine | 3.23 | >=3.15.0-alpha1,<3.15.0-beta1 | 3.15.0-beta1 |
| python | dhi | - | - | >=3.15.0-alpha1,<3.15.0-beta1 | 3.15.0-beta1 |
Severity and metrics
No CVSS data available from this advisory.
NIST
CREATED
UPDATED
ADVISORY IDCVE-2026-1502
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
5.7mediumDebian
CREATED
UPDATED
ADVISORY IDCVE-2026-1502
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
Ubuntu
CREATED
UPDATED
ADVISORY IDCVE-2026-1502
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AmediumAlma
CREATED
UPDATED
ADVISORY IDALSA-2026:10950
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AhighBitnami
CREATED
UPDATED
ADVISORY ID
BIT-libpython-2026-1502
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
5.7mediumBitnami
CREATED
UPDATED
ADVISORY ID
BIT-python-2026-1502
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
5.7mediumBitnami
CREATED
UPDATED
ADVISORY ID
BIT-python-min-2026-1502
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
5.7mediumRocky
CREATED
UPDATED
ADVISORY IDRLSA-2026:10950
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AhighOracle
CREATED
UPDATED
ADVISORY IDELSA-2026-10950
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AhighChainguard
CREATED
UPDATED
ADVISORY ID
CGA-f3xq-534h-274w
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-