CVE-2026-16052 | Python Software Foundation up to 3.15.x Morsel http/cookies.py http.cookies.Morsel value input validation

November 12, 2026 Yanac

A vulnerability labeled as critical has been found in Python Software Foundation Python up to 3.15.x. This issue affects the function http.cookies.Morsel of the file http/cookies.py of the component Morsel. Such manipulation of the argument Value leads to improper input validation.

This vulnerability is listed as CVE-2026-16052. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More