Denis Ledoux

12 exploits Active since Jan 2026
CVE-2025-11468 WRITEUP MEDIUM WRITEUP
CPython HTTP Header Injection via Email Header Folding
When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized.
CVE-2025-11468 WRITEUP MEDIUM WRITEUP
CPython HTTP Header Injection via Email Header Folding
When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized.
CVE-2025-11468 WRITEUP MEDIUM WRITEUP
CPython HTTP Header Injection via Email Header Folding
When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized.
CVE-2025-11468 WRITEUP MEDIUM WRITEUP
CPython HTTP Header Injection via Email Header Folding
When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized.
CVE-2025-11468 WRITEUP MEDIUM WRITEUP
CPython HTTP Header Injection via Email Header Folding
When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized.
CVE-2026-1299 WRITEUP MEDIUM WRITEUP
CPython email module - CRLF Injection in BytesGenerator Header Serialization
The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized. This is only applicable if using "LiteralHeader" writing headers that don't respect email folding rules, the new behavior will reject the incorrectly folded headers in "BytesGenerator".
CVE-2026-1299 WRITEUP MEDIUM WRITEUP
CPython email module - CRLF Injection in BytesGenerator Header Serialization
The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized. This is only applicable if using "LiteralHeader" writing headers that don't respect email folding rules, the new behavior will reject the incorrectly folded headers in "BytesGenerator".
CVE-2026-1299 WRITEUP MEDIUM WRITEUP
CPython email module - CRLF Injection in BytesGenerator Header Serialization
The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized. This is only applicable if using "LiteralHeader" writing headers that don't respect email folding rules, the new behavior will reject the incorrectly folded headers in "BytesGenerator".
CVE-2026-1299 WRITEUP MEDIUM WRITEUP
CPython email module - CRLF Injection in BytesGenerator Header Serialization
The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized. This is only applicable if using "LiteralHeader" writing headers that don't respect email folding rules, the new behavior will reject the incorrectly folded headers in "BytesGenerator".
CVE-2026-1299 WRITEUP MEDIUM WRITEUP
CPython email module - CRLF Injection in BytesGenerator Header Serialization
The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized. This is only applicable if using "LiteralHeader" writing headers that don't respect email folding rules, the new behavior will reject the incorrectly folded headers in "BytesGenerator".
CVE-2025-11468 WRITEUP MEDIUM WRITEUP
CPython HTTP Header Injection via Email Header Folding
When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized.
CVE-2026-1299 WRITEUP MEDIUM WRITEUP
CPython email module - CRLF Injection in BytesGenerator Header Serialization
The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized. This is only applicable if using "LiteralHeader" writing headers that don't respect email folding rules, the new behavior will reject the incorrectly folded headers in "BytesGenerator".