cpython/Misc/NEWS.d/next/Security/2022-06-15-20-09-23.gh-issu...

4 lines
183 B
ReStructuredText

:mod:`http.server`: Fix an open redirection vulnerability in the HTTP server
when an URI path starts with ``//``. Vulnerability discovered, and initial
fix proposed, by Hamza Avvan.