Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-15282
Not yet scoredAwaiting CVSS assessment
Description
User-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in the data URL mediatype.
GitHub