UnratedFix available
gunicorn 26.0.0
Gunicorn 26.0.0 includes HTTP request-target and header validation, request-smuggling hardening, and stricter PROXY protocol parsing. The announcement gives no CVE identifiers or severity rating.
Announced Group revision 1
Original source ↗github-benoitc-gunicorn
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
Security HTTP/1.1 Request-Target Validation (RFC 9112 sections 3.2.3, 3.2.4): Reject authority-form request-target outside CONNECT
gunicorn
Release notes from gunicorn
- Affected versions
- Not stated in this extraction
- Fixed versions
- 26.0.0
26.0.0
- Prerequisites
- Not stated in this extraction
Publisher severity
No explicit severity was extracted.
- Event
- #79710 · Revision 1
- Added to Heist Feed
- Publisher date