Urwid vulnerabilities
We track 1 vulnerability in Urwid products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 18, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Urwid vulnerabilities
- 8.1 High severity
urwid: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
The urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id) in Screen.start() by concatenating two random.randrange(10**9) calls that use Python's Mersenne Twister PRNG, which is not cryptographically secure. Each call con