CVE-2026-1502

Published: Apr 10, 2026

Modified: May 12, 2026

PUBLISHED

CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.

Vendor	Product	Versions
Python Software Foundation	CPython	affected `0 - < 3.14.5rc1` affected `3.15.0a1 - < 3.15.0b1`

patch

issue-tracking

vendor-advisory

patch

patch

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.