https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:31:14.555131+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:4791 ALSA-2025:4791 — Moderate: python39:3.9 security update 2026-10-03T07:31:14.570767+00:00

Affected: AlmaLinux:8: python39, AlmaLinux:8: python39-PyMySQL, AlmaLinux:8: python39-cffi, AlmaLinux:8: python39-chardet, AlmaLinux:8: python39-cryptography, AlmaLinux:8: python39-devel, AlmaLinux:8: python39-idle, AlmaLinux:8: python39-idna, AlmaLinux:8: python39-libs, AlmaLinux:8: python39-lxml and 26 more

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* mod_wsgi: Trusted Proxy Headers Removing Bypass (CVE-2022-2255)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-05209 bdu:2022-05209 2026-10-03T07:31:14.570911+00:00 bdu:2022-05209 https://cve.radiocsirt.org/vuln/bit-mod_wsgi-2022-2255 BIT-mod_wsgi-2022-2255 2026-10-03T07:31:14.570940+00:00

Affected: Bitnami: mod_wsgi

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0218 certfr-2026-avi-0218 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq… 2026-10-03T07:31:14.570976+00:00 certfr-2026-avi-0218 https://cve.radiocsirt.org/vuln/euvd-2026-12290 EUVD-2026-12290 2026-10-03T07:31:14.571004+00:00 EUVD-2026-12290 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2255 fkie_cve-2022-2255 2026-10-03T07:31:14.571026+00:00

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

 https://cve.radiocsirt.org/vuln/ghsa-7527-8855-9cf8 GHSA-7527-8855-9cf8 — Incorrect header handling in mod-wsgi 2026-10-03T07:31:14.571062+00:00

Affected: PyPI: mod-wsgi

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

 https://cve.radiocsirt.org/vuln/gsd-2022-2255 gsd-2022-2255 2026-10-03T07:31:14.571096+00:00 gsd-2022-2255 https://cve.radiocsirt.org/vuln/msrc_cve-2022-2255 msrc_CVE-2022-2255 — A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy all… 2026-10-03T07:31:14.571116+00:00 msrc_CVE-2022-2255 https://cve.radiocsirt.org/vuln/oesa-2022-1827 OESA-2022-1827 — mod_wsgi security update 2026-10-03T07:31:14.571145+00:00

Affected: openEuler:20.03-LTS-SP1: mod_wsgi, openEuler:20.03-LTS-SP3: mod_wsgi, openEuler:22.03-LTS: mod_wsgi

The mod_wsgi adapter is an Apache module that provides a WSGI compliant interface for hosting Python based web applications within Apache. The adapter is written completely in C code against the Apache C runtime andfor hosting WSGI applications within Apache has a lower overhead than using existing WSGI adapters for mod_python or CGI. Security Fix(es): A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy (trusted proxies are configured via the WSGITrustedProxies directive) allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing. References: https://github.com/GrahamDumpleton/mod_wsgi/blob/4.9.2/src/server/mod_wsgi.c#L13940-L13941 https://github.com/GrahamDumpleton/mod_wsgi/blob/4.9.2/src/server/mod_wsgi.c#L14046-L14082(CVE-2022-2255)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12535-1 openSUSE-SU-2024:12535-1 — apache2-mod_wsgi-4.9.4-1.1 on GA media 2026-10-03T07:31:14.571191+00:00

apache2-mod_wsgi-4.9.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2022-254 PYSEC-2022-254 2026-10-03T07:31:14.571237+00:00

Affected: PyPI: mod-wsgi

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

 https://cve.radiocsirt.org/vuln/rhsa-2025:4791 RHSA-2025:4791 — Red Hat Security Advisory: python39:3.9 security update 2026-10-03T07:31:14.571272+00:00

mod_wsgi: Trusted Proxy Headers Removing Bypass

 https://cve.radiocsirt.org/vuln/suse-su-2022:4013-1 SUSE-SU-2022:4013-1 — Security update for apache2-mod_wsgi 2026-10-03T07:31:14.571300+00:00

Security update for apache2-mod_wsgi

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2255 UBUNTU-CVE-2022-2255 2026-10-03T07:31:14.571326+00:00

Affected: Ubuntu:18.04:LTS: mod-wsgi, Ubuntu:20.04:LTS: mod-wsgi, Ubuntu:22.04:LTS: mod-wsgi

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.