CVE-2026-0672
NoneCVSS
—
EPSS
0.5%
Published
Jan 20, 2026
CISA due date
—
The record
When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Bitnami | libpython | 0 | 3.15.0 |
| Bitnami | python | 0 | 3.15.0 |
| Bitnami | python-min | 0 | 3.15.0 |
| Chainguard | python-3.10 | 0 | 3.10.19-r4 |
| Chainguard | python-3.11 | 0 | 3.11.14-r3 |
| Chainguard | python-3.11 | 0 | 3.11.14-r5 |
| Chainguard | python-3.12 | 0 | 3.12.12-r5 |
| Chainguard | python-3.13 | 0 | 3.13.12-r1 |
| Chainguard | python-3.14 | 0 | 3.14.3-r1 |
| Chainguard | python-3.9 | 0 | 3.9.25-r2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | python3 | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | python3-core | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | python310 | 0 | 3.10.19-150400.4.97.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | python310-core | 0 | 3.10.19-150400.4.97.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | python3 | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | python3-core | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | python310 | 0 | 3.10.19-150400.4.97.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | python310-core | 0 | 3.10.19-150400.4.97.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | python3 | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | python3-core | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | python3 | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | python3-core | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Micro 5.2 | python3 | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Micro 5.2 | python3-core | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Micro 5.3 | python3 | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Micro 5.3 | python3-core | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Micro 5.4 | python3 | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Micro 5.4 | python3-core | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Micro 5.5 | python3 | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Micro 5.5 | python3-core | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | python3 | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | python3-core | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | python311-core | 0 | 3.11.14-150600.3.44.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | python311-core | 0 | 3.11.15-150600.3.53.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP7 | python3-core | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | python | 0 | 2.7.18-150000.102.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | python-base | 0 | 2.7.18-150000.102.1 |
| SUSE:Linux Enterprise Module for Python 3 15 SP7 | python311 | 0 | 3.11.14-150600.3.44.1 |
| SUSE:Linux Enterprise Module for Python 3 15 SP7 | python311 | 0 | 3.11.15-150600.3.53.1 |
| SUSE:Linux Enterprise Module for Python 3 15 SP7 | python311-core | 0 | 3.11.14-150600.3.44.1 |
| SUSE:Linux Enterprise Module for Python 3 15 SP7 | python311-core | 0 | 3.11.15-150600.3.53.1 |
| SUSE:Linux Enterprise Module for Python 3 15 SP7 | python313 | 0 | 3.13.12-150700.4.39.1 |
| SUSE:Linux Enterprise Module for Python 3 15 SP7 | python313-core | 0 | 3.13.12-150700.4.39.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | python3 | 0 | 3.4.10-25.172.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | python3-base | 0 | 3.4.10-25.172.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | python36 | 0 | 3.6.15-100.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | python36-core | 0 | 3.6.15-100.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | python3 | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | python3-core | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | python310 | 0 | 3.10.19-150400.4.97.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | python310-core | 0 | 3.10.19-150400.4.97.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | python3 | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | python3-core | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | python39 | 0 | 3.9.25-150300.4.93.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | python39-core | 0 | 3.9.25-150300.4.93.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | python3 | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | python3-core | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | python311 | 0 | 3.11.14-150600.3.44.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | python311 | 0 | 3.11.15-150600.3.53.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | python311-core | 0 | 3.11.14-150600.3.44.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | python311-core | 0 | 3.11.15-150600.3.53.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | python312 | 0 | 3.12.12-150600.3.43.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | python312-core | 0 | 3.12.12-150600.3.43.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | python3 | 0 | 3.4.10-25.172.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | python3-base | 0 | 3.4.10-25.172.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | python36 | 0 | 3.6.15-100.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | python36-core | 0 | 3.6.15-100.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | python3 | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | python3-core | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | python310 | 0 | 3.10.19-150400.4.97.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | python310-core | 0 | 3.10.19-150400.4.97.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | python3 | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | python3-core | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | python39 | 0 | 3.9.25-150300.4.93.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | python39-core | 0 | 3.9.25-150300.4.93.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | python3 | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | python3-core | 0 | 3.6.15-150300.10.106.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | python311 | 0 | 3.11.14-150600.3.44.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | python311 | 0 | 3.11.15-150600.3.53.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | python311-core | 0 | 3.11.14-150600.3.44.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | python311-core | 0 | 3.11.15-150600.3.53.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | python312 | 0 | 3.12.12-150600.3.43.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | python312-core | 0 | 3.12.12-150600.3.43.1 |
| Wolfi | python-3.10 | 0 | 3.10.19-r4 |
| Wolfi | python-3.11 | 0 | 3.11.14-r3 |
| Wolfi | python-3.11 | 0 | 3.11.14-r5 |
| Wolfi | python-3.12 | 0 | 3.12.12-r5 |
| Wolfi | python-3.13 | 0 | 3.13.12-r1 |
| Wolfi | python-3.14 | 0 | 3.14.3-r1 |
| openSUSE:Leap 15.6 | python | 0 | 2.7.18-150000.102.1 |
| openSUSE:Leap 15.6 | python-base | 0 | 2.7.18-150000.102.1 |
| openSUSE:Leap 15.6 | python-doc | 0 | 2.7.18-150000.102.1 |
| openSUSE:Leap 15.6 | python3 | 0 | 3.6.15-150300.10.106.1 |
| openSUSE:Leap 15.6 | python3-core | 0 | 3.6.15-150300.10.106.1 |
| openSUSE:Leap 15.6 | python3-documentation | 0 | 3.6.15-150300.10.106.1 |
| openSUSE:Leap 15.6 | python310 | 0 | 3.10.19-150400.4.97.1 |
| openSUSE:Leap 15.6 | python310-core | 0 | 3.10.19-150400.4.97.1 |
| openSUSE:Leap 15.6 | python310-documentation | 0 | 3.10.19-150400.4.97.1 |
| openSUSE:Leap 15.6 | python311 | 0 | 3.11.14-150600.3.44.1 |
| openSUSE:Leap 15.6 | python311 | 0 | 3.11.15-150600.3.53.1 |
| openSUSE:Leap 15.6 | python311-core | 0 | 3.11.14-150600.3.44.1 |
| openSUSE:Leap 15.6 | python311-core | 0 | 3.11.15-150600.3.53.1 |
| openSUSE:Leap 15.6 | python311-documentation | 0 | 3.11.14-150600.3.44.1 |
| openSUSE:Leap 15.6 | python311-documentation | 0 | 3.11.15-150600.3.53.1 |
| openSUSE:Leap 15.6 | python312 | 0 | 3.12.12-150600.3.43.1 |
| openSUSE:Leap 15.6 | python312-core | 0 | 3.12.12-150600.3.43.1 |
| openSUSE:Leap 15.6 | python312-documentation | 0 | 3.12.12-150600.3.43.1 |
| openSUSE:Leap 15.6 | python39 | 0 | 3.9.25-150300.4.93.1 |
| openSUSE:Leap 15.6 | python39-core | 0 | 3.9.25-150300.4.93.1 |
| openSUSE:Leap 15.6 | python39-documentation | 0 | 3.9.25-150300.4.93.1 |
| openSUSE:Leap 16.0 | python313 | 0 | 3.13.12-160000.1.1 |
| openSUSE:Leap 16.0 | python313-core | 0 | 3.13.12-160000.1.1 |
| openSUSE:Leap 16.0 | python313-documentation | 0 | 3.13.12-160000.1.1 |
| openSUSE:Leap 16.0 | python313-nogil | 0 | 3.13.12-160000.1.1 |
| openSUSE:Leap 16.0 | python313-nogil-nogil-core | 0 | 3.13.12-160000.1.1 |
| openSUSE:Tumbleweed | python-M2Crypto | 0 | 0.48.0-1.1 |
| openSUSE:Tumbleweed | python310 | 0 | 3.10.19-4.1 |
| openSUSE:Tumbleweed | python311 | 0 | 3.11.14-4.1 |
| openSUSE:Tumbleweed | python312 | 0 | 3.12.12-5.1 |
| openSUSE:Tumbleweed | python313 | 0 | 3.13.12-1.1 |
| openSUSE:Tumbleweed | python314 | 0 | 3.14.3-1.1 |
| openSUSE:Tumbleweed | python315 | 0 | 3.15.0~a3-3.1 |
Related vulnerabilities
- PSF-2026-5 When using http.cookies.Morsel, user-controlled cookie values and parameters can allow… Same vulnerability
- CVE-2026-1299 The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines… Also affects libpython
- PSF-2026-8 The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines… Also affects libpython
- CVE-2025-12781 When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode()… Also affects libpython
- PSF-2026-7 When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode()… Also affects libpython
- CVE-2026-0865 User-controlled header names and values containing newlines can allow injecting HTTP… Also affects libpython
- CVE-2025-15367 The poplib module, when passed a user-controlled command, can have additional commands… Also affects libpython
- CVE-2025-15366 The imaplib module, when passed a user-controlled command, can have additional commands… Also affects libpython