{"id":"PSF-2016-9","aliases":[],"status":"published","title":"Issue #26657: HTTP server directory traversal","description":"Fix directory traversal vulnerability with ``http.server`` and\n``SimpleHTTPServer`` on Windows.\n\nRegression of Python 3.3.5.\n\nPython issue reported at 2016-03-14.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2016-03-28T00:00:00Z","modified":"2025-10-09T00:59:02Z","references":[{"url":"https://bugs.python.org/issue26657","tags":["report"]}],"sources":{"osv":[{"id":"PSF-2016-9","title":"Issue #26657: HTTP server directory traversal","description":"Fix directory traversal vulnerability with ``http.server`` and\n``SimpleHTTPServer`` on Windows.\n\nRegression of Python 3.3.5.\n\nPython issue reported at 2016-03-14.\n","status":"published","published":"2016-03-28T00:00:00Z","modified":"2025-10-09T00:59:02.089526Z","updated_at":"2026-11-02T15:52:50.263679Z"}]}}