Autobahn|Python before 20.12.3 allows redirect header injection.
"https://github.com/pypa/advisory-database/blob/main/vulns/autobahn/PYSEC-2020-25.yaml"