CVE-2026-1502: CPython HTTP Proxy Tunnel CR/LF Injection on Windows Explained
A medium-severity vulnerability in CPython’s HTTP proxy tunneling code leaves Windows users open to CR/LF injection attacks, according to an advisory published in April 2026. Tracked as...