CVE-2026-54770 | Pylons WebOb up to 1.8.10 src/webob/response.py Response._make_location_absolute Location redirect

August 20, 2026 Yanac

A vulnerability identified as problematic has been detected in Pylons WebOb up to 1.8.10. This impacts the function Response._make_location_absolute of the file src/webob/response.py. This manipulation of the argument Location causes open redirect.

This vulnerability is tracked as CVE-2026-54770. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More