Pylons webob

• CVE-2026-54770 Medium 6.1 WebOb: Open redirect in Location header normalization via leading C0 control / space characters 0.4%
• CVE-2026-44889 Medium 6.1 WebOb: Location header normalization during redirect leads to open redirect 0.3%
• CVE-2024-42353 Medium 6.1 WebOb's location header normalization during redirect leads to open redirect 0.6%