https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:34:51.568124+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-mongo-orchestration-cve-2016-9964 BREW-mongo-orchestration-CVE-2016-9964 — bottle.py vulnerable to CRLF Injection 2026-10-02T23:34:51.674488+00:00

Affected: Homebrew: mongo-orchestration

bottle.py is a fast and simple micro-framework for python web-applications. redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.

 https://cve.radiocsirt.org/vuln/cve-2016-9964 CVE-2016-9964 2026-10-02T23:34:51.674563+00:00

redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.

 https://cve.radiocsirt.org/vuln/ghsa-j6f7-hghw-g437 GHSA-j6f7-hghw-g437 — bottle.py vulnerable to CRLF Injection 2026-10-02T23:34:51.674606+00:00

Affected: PyPI: bottle

bottle.py is a fast and simple micro-framework for python web-applications. redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.