Not analysed yet
We haven’t published our analysis of this Advisory yet. Once a person has reviewed it, this page will say what’s vulnerable, what has to be true for your app to be affected, and how to check.
Severity and exploitation
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 8.1 | High | 3.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | GitHub Advisory Database |
- CISA KEV Not listed.
- EPSS No score.
Timeline
- 18 Jul 2026, 15:31 UTC Confirmed by GitHub Advisory Database
- 5 Nov 2026, 15:17 UTC First seen by agentprime
- 5 Nov 2026, 15:30 UTC Confirmed by OSV
Sources
- GitHub Advisory Database: GHSA-83x9-8wvq-rrcp
- OSV: GHSA-83x9-8wvq-rrcp
- github.com/urwid/urwid/security/advisories/GHSA-rjwp-g85x-gmjv
- nvd.nist.gov/vuln/detail/CVE-2026-9323
- github.com/urwid/urwid/issues/1127
- github.com/urwid/urwid/pull/1128
- github.com/urwid/urwid/commit/24acd12f0d0598036d0d577f2ee63e4a27b4a3d9
- github.com/urwid/urwid
- www.vulncheck.com/advisories/insecure-prng-and-information-exposure-in-urwid-web-display-backend