CVE-2026-6019

ADVISORY - nist

Summary

http.cookies.Morsel.js_output() returns an inline inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value.

EPSS Score⁠: 0.00229 (0.135)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-116⁠

Improper Encoding or Escaping of Output

CWE-150⁠

Improper Neutralization of Escape, Meta, or Control Sequences

Impacted images

Advisories

Docker

CREATED

2 months ago

UPDATED

2 months ago

ADVISORY ID

CVE-2026-6019

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Package	Type	OS Name	OS Version	Affected Ranges	Fix Versions
python	dhi	-	-	<3.13.14	3.13.14
alpine/python-3.10	apk	alpine	3.23	<3.13.14	3.13.14
alpine/python-3.10	apk	alpine	3.23	>=3.14.0-alpha1,<3.14.5-rc1	3.14.5-rc1
alpine/python-3.10	apk	alpine	3.23	>=3.15.0-alpha1,<3.15.0-beta1	3.15.0-beta1
alpine/python-3.11	apk	alpine	3.23	<3.13.14	3.13.14
alpine/python-3.11	apk	alpine	3.23	>=3.14.0-alpha1,<3.14.5-rc1	3.14.5-rc1
alpine/python-3.11	apk	alpine	3.23	>=3.15.0-alpha1,<3.15.0-beta1	3.15.0-beta1
alpine/python-3.12	apk	alpine	3.23	<3.13.14	3.13.14
alpine/python-3.12	apk	alpine	3.23	>=3.14.0-alpha1,<3.14.5-rc1	3.14.5-rc1
alpine/python-3.12	apk	alpine	3.23	>=3.15.0-alpha1,<3.15.0-beta1	3.15.0-beta1
alpine/python-3.13	apk	alpine	3.23	<3.13.14	3.13.14
alpine/python-3.13	apk	alpine	3.23	>=3.14.0-alpha1,<3.14.5-rc1	3.14.5-rc1
alpine/python-3.13	apk	alpine	3.23	>=3.15.0-alpha1,<3.15.0-beta1	3.15.0-beta1
alpine/python-3.14	apk	alpine	3.23	<3.13.14	3.13.14
alpine/python-3.14	apk	alpine	3.23	>=3.14.0-alpha1,<3.14.5-rc1	3.14.5-rc1
alpine/python-3.14	apk	alpine	3.23	>=3.15.0-alpha1,<3.15.0-beta1	3.15.0-beta1
debian/python-3.10	deb	debian	13	<3.13.14	3.13.14
debian/python-3.10	deb	debian	13	>=3.14.0-alpha1,<3.14.5-rc1	3.14.5-rc1
debian/python-3.10	deb	debian	13	>=3.15.0-alpha1,<3.15.0-beta1	3.15.0-beta1
debian/python-3.11	deb	debian	13	<3.13.14	3.13.14
debian/python-3.11	deb	debian	13	>=3.14.0-alpha1,<3.14.5-rc1	3.14.5-rc1
debian/python-3.11	deb	debian	13	>=3.15.0-alpha1,<3.15.0-beta1	3.15.0-beta1
debian/python-3.12	deb	debian	13	<3.13.14	3.13.14
debian/python-3.12	deb	debian	13	>=3.14.0-alpha1,<3.14.5-rc1	3.14.5-rc1
debian/python-3.12	deb	debian	13	>=3.15.0-alpha1,<3.15.0-beta1	3.15.0-beta1
debian/python-3.13	deb	debian	13	<3.13.14	3.13.14
debian/python-3.13	deb	debian	13	>=3.14.0-alpha1,<3.14.5-rc1	3.14.5-rc1
debian/python-3.13	deb	debian	13	>=3.15.0-alpha1,<3.15.0-beta1	3.15.0-beta1
debian/python-3.14	deb	debian	13	<3.13.14	3.13.14
debian/python-3.14	deb	debian	13	>=3.14.0-alpha1,<3.14.5-rc1	3.14.5-rc1
debian/python-3.14	deb	debian	13	>=3.15.0-alpha1,<3.15.0-beta1	3.15.0-beta1
python	dhi	-	-	>=3.14.0-alpha1,<3.14.5-rc1	3.14.5-rc1
python	dhi	-	-	>=3.15.0-alpha1,<3.15.0-beta1	3.15.0-beta1

Severity and metrics

No CVSS data available from this advisory.

NIST

CREATED

2 months ago

UPDATED

22 days ago

ADVISORY IDCVE-2026-6019⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-116⁠CWE-150⁠

CVSS SCORE

2.1low

Debian

CREATED

2 months ago

UPDATED

3 days ago

ADVISORY IDCVE-2026-6019⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

2 months ago

UPDATED

18 hours ago

ADVISORY IDCVE-2026-6019⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

6.1medium

Amazon

CREATED

11 days ago

UPDATED

11 days ago

ADVISORY IDALAS2023-2026-1774⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Amazon

CREATED

11 days ago

UPDATED

11 days ago

ADVISORY IDALAS2023-2026-1785⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Amazon

CREATED

11 days ago

UPDATED

11 days ago

ADVISORY IDALAS2023-2026-1786⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Amazon

CREATED

11 days ago

UPDATED

11 days ago

ADVISORY IDALAS2023-2026-1821⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Bitnami

CREATED

2 months ago

UPDATED

1 month ago

ADVISORY ID

BIT-libpython-2026-6019

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

2.1low

Bitnami

CREATED

2 months ago

UPDATED

1 month ago

ADVISORY ID

BIT-python-2026-6019

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

2.1low

Bitnami

CREATED

2 months ago

UPDATED

1 month ago

ADVISORY ID

BIT-python-min-2026-6019

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

2.1low

Chainguard

CREATED

1 month ago

UPDATED

1 month ago

ADVISORY ID

CGA-r9hf-494w-36f7

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Photon

CREATED

15 days ago

UPDATED

15 days ago

ADVISORY ID

CVE-2026-6019

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

6.1medium

minimos

CREATED

2 months ago

UPDATED

2 months ago

ADVISORY ID

MINI-4pxg-f66m-j7fv

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

15 days ago

UPDATED

15 days ago

ADVISORY ID

MINI-4xv9-2j3q-2vmp

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

12 days ago

UPDATED

12 days ago

ADVISORY ID

MINI-87fm-mqwf-q5mg

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

2 months ago

UPDATED

2 months ago

ADVISORY ID

MINI-jpp5-55pm-p7m5

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

12 days ago

UPDATED

12 days ago

ADVISORY ID

MINI-pffr-5h4j-f65v

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY