CVE-2026-79311

webpy web.py 0.76 is vulnerable to Cross Site Scripting (XSS) via render_jinja.__init__().

• Published Sep 22, 2026
• Not yet scored
• 0.2% chance of exploitation in the next 30 days (EPSS)

CVE-2026-79311 at the National Vulnerability Database