SUSE-SU-2026:4765-1

CVE-2026-54770: an unauthenticated attacker who can influence an application's redirect target can send users to an attacker-controlled host for phishing or OAuth and SSO token theft (bsc#1275917).

References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP7

python-WebOb

Name: python-WebOb
Purl: pkg:rpm/suse/python-WebOb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.7.4-150000.3.9.1

{
    "binaries":  [
        {
            "python3-WebOb":  "1.7.4-150000.3.9.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4765-1.json"

SUSE:Linux Enterprise Module for Package Hub 15 SP7

python-WebOb

Name: python-WebOb
Purl: pkg:rpm/suse/python-WebOb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.7.4-150000.3.9.1

{
    "binaries":  [
        {
            "python2-WebOb":  "1.7.4-150000.3.9.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4765-1.json"