CRLF Injection in pypiserver

MEDIO 6.1CVE-2019-6802 · GHSA-mh24-7wvg-v88g · PYSEC-2019-113 · Published 25/01/2019 · updated 17/06/2026

En resumen

CVE-2019-6802 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a pypiserver, pypiserver (python).
Probabilidad de explotación en los próximos 30 días (EPSS): 3.8%, mayor que el 90.0% de las vulnerabilidades.
Solución: actualizar a 1.2.6 o posterior.

Package	Affected versions	Patched versions
pypiserver PyPI	`< 1.2.6`	`1.2.6`
pypiserver python	`≤ 1.2.5`	No fix yet

CRLF Injection in pypiserver 1.2.5 and below allows attackers to set arbitrary HTTP headers and possibly conduct XSS attacks via a %0d%0a in a URI.

NVD description

CRLF Injection in pypiserver 1.2.5 and below allows attackers to set arbitrary HTTP headers and possibly conduct XSS attacks via a %0d%0a in a URI.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.