Most recent entries from all

BREW-mongo-orchestration-CVE-2016-9964 — bottle.py vulnerable to CRLF Injection

2026-10-03T01:12:06.635603+00:00

Affected: Homebrew: mongo-orchestration

bottle.py is a fast and simple micro-framework for python web-applications. redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.

cnvd-2016-13023

2026-10-03T01:12:06.635662+00:00

cnvd-2016-13023

EUVD-2026-88163

2026-10-03T01:12:06.635680+00:00

EUVD-2026-88163

fkie_cve-2016-9964

2026-10-03T01:12:06.635692+00:00

redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.

GHSA-j6f7-hghw-g437 — bottle.py vulnerable to CRLF Injection

2026-10-03T01:12:06.635713+00:00

Affected: PyPI: bottle

gsd-2016-9964

2026-10-03T01:12:06.635733+00:00

gsd-2016-9964

openSUSE-SU-2024:11220-1 — python-bottle-doc-0.12.19-1.8 on GA media

2026-10-03T01:12:06.635744+00:00

python-bottle-doc-0.12.19-1.8 on GA media

PYSEC-2016-24

2026-10-03T01:12:06.635760+00:00

Affected: PyPI: bottle

redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.

UBUNTU-CVE-2016-9964

2026-10-03T01:12:06.635777+00:00

Affected: Ubuntu:Pro:14.04:LTS: python-bottle, Ubuntu:16.04:LTS: python-bottle

redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.