Seth Larson
| Seth Larson | |
|---|---|
| Born | |
| 💼 Occupation | Python security researcher |
| 👔 Employer | Python Software Foundation |
| Known for | Python security research and vulnerability disclosure |
| 🌐 Website | sethmlarson |
Seth Larson is a software security researcher specialising in the Python ecosystem. He works as Security Developer-in-Residence at the Python Software Foundation, focusing on identifying vulnerabilities, coordinating security fixes and improving the security of CPython and its libraries.
Security research
Larson works on identifying and addressing security vulnerabilities in Python and its standard library. His work includes vulnerability disclosure, security coordination and reviewing security issues affecting Python software. In January 2026, Larson published a security advisory concerning a vulnerability in Python's wsgiref module. The vulnerability affected the `wsgiref.headers.Headers` class, which did not properly filter newline characters in user-controlled HTTP header names and values. This could allow HTTP header injection.[1] The issue was addressed through changes to CPython.[2]
References
- ↑ Seth Larson (20 January 2026). "wsgiref.headers.Headers allows header newline injection". Python Security-announce. Retrieved 10 November 2026.
- ↑ "wsgiref.headers.Headers allows header newline injection". GitHub. Retrieved 10 November 2026.
External links
This article "Seth Larson" is from Wikipedia. The list of its authors can be seen in its historical and/or the page Edithistory:Seth Larson. Articles copied from Draft Namespace on Wikipedia could be seen on the Draft Namespace of Wikipedia and not main one.
