UpHeron
All vulnerabilities

Servers and applications

CVE-2020-8492

Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.

Severity
Medium 6.5
Published
30 Jan 2020
Last changed
14 Oct 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
PythonServers and applications · cpe:a:python:python
  • From 2.7.0 up to 2.7.17
  • From 3.5.0 up to 3.5.9
  • From 3.6.0 up to 3.6.10
  • From 3.7.0 up to 3.7.6
  • From 3.8.0 up to 3.8.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-8492
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-8492