CVE-2026-22779: Python Crlf Injection Header Concat

Direct concatenation of variables into an HTTP header string without sanitization can lead to CRLF injection.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-22779-python-crlf-injection-header-concat --engine opengrep

Description

Direct concatenation of variables into an HTTP header string without sanitization can lead to CRLF injection.