https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:31:12 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:4791 <p><strong>Affected:</strong> AlmaLinux:8: python39, AlmaLinux:8: python39-PyMySQL, AlmaLinux:8: python39-cffi, AlmaLinux:8: python39-chardet, AlmaLinux:8: python39-cryptography, AlmaLinux:8: python39-devel, AlmaLinux:8: python39-idle, AlmaLinux:8: python39-idna, AlmaLinux:8: python39-libs, AlmaLinux:8: python39-lxml and 26 more</p> <p>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.</p> <p>Security Fix(es):</p> <p>* mod_wsgi: Trusted Proxy Headers Removing Bypass (CVE-2022-2255)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: python39, AlmaLinux:8: python39-PyMySQL, AlmaLinux:8: python39-cffi, AlmaLinux:8: python39-chardet, AlmaLinux:8: python39-cryptography, AlmaLinux:8: python39-devel, AlmaLinux:8: python39-idle, AlmaLinux:8: python39-idna, AlmaLinux:8: python39-libs, AlmaLinux:8: python39-lxml and 26 more</p> <p>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.</p> <p>Security Fix(es):</p> <p>* mod_wsgi: Trusted Proxy Headers Removing Bypass (CVE-2022-2255)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:4791 https://cve.radiocsirt.org/vuln/bdu:2022-05209 bdu:2022-05209 https://cve.radiocsirt.org/vuln/bdu:2022-05209 https://cve.radiocsirt.org/vuln/bit-mod_wsgi-2022-2255 <p><strong>Affected:</strong> Bitnami: mod_wsgi</p> <p>A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.</p> <p><strong>Affected:</strong> Bitnami: mod_wsgi</p> <p>A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.</p> https://cve.radiocsirt.org/vuln/bit-mod_wsgi-2022-2255 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0218 certfr-2026-avi-0218 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0218 https://cve.radiocsirt.org/vuln/euvd-2026-12290 EUVD-2026-12290 https://cve.radiocsirt.org/vuln/euvd-2026-12290 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2255 <p>A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.</p> <p>A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-2255 https://cve.radiocsirt.org/vuln/ghsa-7527-8855-9cf8 <p><strong>Affected:</strong> PyPI: mod-wsgi</p> <p>A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.</p> <p><strong>Affected:</strong> PyPI: mod-wsgi</p> <p>A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.</p> https://cve.radiocsirt.org/vuln/ghsa-7527-8855-9cf8 https://cve.radiocsirt.org/vuln/gsd-2022-2255 gsd-2022-2255 https://cve.radiocsirt.org/vuln/gsd-2022-2255 https://cve.radiocsirt.org/vuln/msrc_cve-2022-2255 msrc_CVE-2022-2255 https://cve.radiocsirt.org/vuln/msrc_cve-2022-2255 https://cve.radiocsirt.org/vuln/oesa-2022-1827 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: mod_wsgi, openEuler:20.03-LTS-SP3: mod_wsgi, openEuler:22.03-LTS: mod_wsgi</p> <p>The mod_wsgi adapter is an Apache module that provides a WSGI compliant interface for hosting Python based web applications within Apache. The adapter is written completely in C code against the Apache C runtime andfor hosting WSGI applications within Apache has a lower overhead than using existing WSGI adapters for mod_python or CGI. Security Fix(es): A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy (trusted proxies are configured via the WSGITrustedProxies directive) allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing. References: https://github.com/GrahamDumpleton/mod_wsgi/blob/4.9.2/src/server/mod_wsgi.c#L13940-L13941 https://github.com/GrahamDumpleton/mod_wsgi/blob/4.9.2/src/server/mod_wsgi.c#L14046-L14082(CVE-2022-2255)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: mod_wsgi, openEuler:20.03-LTS-SP3: mod_wsgi, openEuler:22.03-LTS: mod_wsgi</p> <p>The mod_wsgi adapter is an Apache module that provides a WSGI compliant interface for hosting Python based web applications within Apache. The adapter is written completely in C code against the Apache C runtime andfor hosting WSGI applications within Apache has a lower overhead than using existing WSGI adapters for mod_python or CGI. Security Fix(es): A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy (trusted proxies are configured via the WSGITrustedProxies directive) allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing. References: https://github.com/GrahamDumpleton/mod_wsgi/blob/4.9.2/src/server/mod_wsgi.c#L13940-L13941 https://github.com/GrahamDumpleton/mod_wsgi/blob/4.9.2/src/server/mod_wsgi.c#L14046-L14082(CVE-2022-2255)</p> https://cve.radiocsirt.org/vuln/oesa-2022-1827 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12535-1 <p>apache2-mod_wsgi-4.9.4-1.1 on GA media</p> <p>apache2-mod_wsgi-4.9.4-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12535-1 https://cve.radiocsirt.org/vuln/pysec-2022-254 <p><strong>Affected:</strong> PyPI: mod-wsgi</p> <p>A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.</p> <p><strong>Affected:</strong> PyPI: mod-wsgi</p> <p>A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.</p> https://cve.radiocsirt.org/vuln/pysec-2022-254 https://cve.radiocsirt.org/vuln/rhsa-2025:4791 <p>mod_wsgi: Trusted Proxy Headers Removing Bypass</p> <p>mod_wsgi: Trusted Proxy Headers Removing Bypass</p> https://cve.radiocsirt.org/vuln/rhsa-2025:4791 https://cve.radiocsirt.org/vuln/suse-su-2022:4013-1 <p>Security update for apache2-mod_wsgi</p> <p>Security update for apache2-mod_wsgi</p> https://cve.radiocsirt.org/vuln/suse-su-2022:4013-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2255 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mod-wsgi, Ubuntu:20.04:LTS: mod-wsgi, Ubuntu:22.04:LTS: mod-wsgi</p> <p>A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: mod-wsgi, Ubuntu:20.04:LTS: mod-wsgi, Ubuntu:22.04:LTS: mod-wsgi</p> <p>A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2255