CVE-2026-34519: Python Incomplete Crlf Validationcve-2026-34519-python-incomplete-crlf-validation
The code checks for the presence of newline characters ('\n') but fails to check for carriage returns ('\r'). In contexts where HTTP headers or status lines are constructed, failing to reject '\r' allows an attacker to inject HTTP control characters, leading to HTTP Response Splitting or CRLF injection. Ensure that both '\r' and '\n' are validated.
