{
  "schema_version": "1.5.0",
  "id": "PSF-2026-15",
  "published": "2026-04-10T17:54:44.121Z",
  "modified": "2026-06-30T15:12:43.900Z",
  "aliases": [
    "CVE-2026-1502"
  ],
  "details": "CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.",
  "affected": [
    {
      "ranges": [
        {
          "type": "GIT",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "05ed7ce7ae9e17c23a04085b2539fe6d6d3cef69"
            },
            {
              "fixed": "b1cf9016335cb637c5a425032e8274a224f4b2ed"
            },
            {
              "fixed": "9e071c9b28c17f347f81b388a003d4eeb3c7a8dd"
            },
            {
              "fixed": "c00c386faa579ad71196d33408644478488e43ec"
            },
            {
              "fixed": "56b7100b04e44ea27989242b176beb8f016b2c53"
            },
            {
              "fixed": "58703ec1bdd1eb075e8b01a0c427683ce594dd3e"
            }
          ],
          "repo": "https://github.com/python/cpython"
        }
      ]
    }
  ],
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/python/cpython/pull/146212"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/python/cpython/issues/146211"
    },
    {
      "type": "ADVISORY",
      "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/2IVPAEQWUJBCTQZEJEVTYCIKSMQPGRZ3/"
    },
    {
      "type": "FIX",
      "url": "https://github.com/python/cpython/commit/05ed7ce7ae9e17c23a04085b2539fe6d6d3cef69"
    },
    {
      "type": "FIX",
      "url": "https://github.com/python/cpython/commit/b1cf9016335cb637c5a425032e8274a224f4b2ed"
    },
    {
      "type": "FIX",
      "url": "https://github.com/python/cpython/commit/9e071c9b28c17f347f81b388a003d4eeb3c7a8dd"
    },
    {
      "type": "FIX",
      "url": "https://github.com/python/cpython/commit/c00c386faa579ad71196d33408644478488e43ec"
    },
    {
      "type": "FIX",
      "url": "https://github.com/python/cpython/commit/56b7100b04e44ea27989242b176beb8f016b2c53"
    },
    {
      "type": "FIX",
      "url": "https://github.com/python/cpython/commit/58703ec1bdd1eb075e8b01a0c427683ce594dd3e"
    }
  ],
  "database_specific": {
    "cwe_ids": []
  }
}