[issue43882] [security] CVE-2022-0391: urllib.parse should sanitize urls containing ASCII newline and tabs.

2022-02-09 Thread Mariusz Felisiak
Change by Mariusz Felisiak : -- nosy: +felixxm ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.p

[issue43882] [security] CVE-2022-0391: urllib.parse should sanitize urls containing ASCII newline and tabs.

2022-02-08 Thread STINNER Victor
STINNER Victor added the comment: > Looks like that CVE isn't public yet. > https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0391 > Any chance I can get access (I originally reported this vuln.). Message from Gaurav Kamathe who requested the CVE: "We've sent a request to MITRE to get t

[issue43882] [security] CVE-2022-0391: urllib.parse should sanitize urls containing ASCII newline and tabs.

2022-02-06 Thread Mike Lissner
Mike Lissner added the comment: Looks like that CVE isn't public yet. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0391 Any chance I can get access (I originally reported this vuln.). My email is m...@free.law, if it's possible and my email is needed. Thanks! -- ___

[issue43882] [security] CVE-2022-0391: urllib.parse should sanitize urls containing ASCII newline and tabs.

2022-02-06 Thread STINNER Victor
STINNER Victor added the comment: CVE-2022-0391 has been assigned to this vulnerability. -- nosy: +vstinner title: [security] urllib.parse should sanitize urls containing ASCII newline and tabs. -> [security] CVE-2022-0391: urllib.parse should sanitize urls containing ASCII newline a