| Package | Affected versions | Patched versions |
|---|---|---|
| zfs storage appliance kit | = 8.8 | |
| python | ≥ 3.0.0, < 3.5.10≥ 3.6.0, < 3.6.12≥ 3.7.0, < 3.7.9≥ 3.8.0, < 3.8.5 | 3.5.103.6.123.7.93.8.5 |
http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free