rpm package
almalinux/python3-urwid
pkg:rpm/almalinux/python3-urwid
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-9323 | Hig | 8.1 | < 2.5.3-4.el10_2.5 | 2.5.3-4.el10_2.5 | Jul 18, 2026 | The urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id) in Screen.start() by concatenating two random.randrange(10**9) calls that use Python's Mersenne Twister PRNG, which is not cryptographically secure. Each call consumes approximately |
- affected < 2.5.3-4.el10_2.5fixed 2.5.3-4.el10_2.5
The urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id) in Screen.start() by concatenating two random.randrange(10**9) calls that use Python's Mersenne Twister PRNG, which is not cryptographically secure. Each call consumes approximately