Skip to content

Product

pypi microdot vulnerabilities

1 published CVE affecting pypi microdot, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
0
Low
1
Unscored
0
CISA KEV
0

Latest pypi microdot CVEs

Newest publication first

  1. CVE-2026-42874 Microdot: HTTP response splitting in Response.set_cookie()

    Published
    LowCVSS 3.7 EPSS 0.22%

    Microdot is a minimalistic Python web framework. Prior to 2.6.1, the Response.set_cookie() method does not sanitize its string arguments, and in particular will not detect the presence of the \r\n sequence in them. This can be a potential source of header injection attacks. For a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.