inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie v","inLanguage":"en-US","identifier":"CVE-2026-6019","datePublished":"2026-04-22T20:16:42.617","dateModified":"2026-10-26T21:10:00.170","about":{"@type":"Thing","name":"CVE-2026-6019","identifier":"CVE-2026-6019"},"isPartOf":{"@type":"WebSite","name":"GotRooted","url":"https://gotrooted.org/"},"publisher":{"@type":"Organization","name":"GotRooted","logo":{"@type":"ImageObject","url":"https://gotrooted.org/logo.png","width":640,"height":640}}},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://gotrooted.org/"},{"@type":"ListItem","position":2,"name":"cve","item":"https://gotrooted.org/cve"},{"@type":"ListItem","position":3,"name":"CVE 2026 6019","item":"https://gotrooted.org/cve/CVE-2026-6019"}]}]}

VULNERABILITY INTELLIGENCE

CVE-2026-6019

CVSS score6.1 MEDIUM
EPSS probability0.21%
CISA KEVNot currently listed
Published2026-04-22
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence </script> inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value.

Weakness classification

  • cna@python.org: CWE-150
  • nvd@nist.gov: CWE-116

Primary references