https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:43:38.459826+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-7313 CVE-2019-7313 2026-10-02T22:43:38.491084+00:00

www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of /auth/login and /auth/logout via the redirect parameter. This affects other web sites in the same domain.

 https://cve.radiocsirt.org/vuln/ghsa-66x7-2r56-fj77 GHSA-66x7-2r56-fj77 — Buildbot CRLF Injection 2026-10-02T22:43:38.491154+00:00

Affected: PyPI: buildbot

`www/resource.py` in Buildbot before 1.8.1 allows CRLF injection in the Location header of `/auth/login` and `/auth/logout` via the redirect parameter. This affects other web sites in the same domain.