pallets Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by pallets

JSON RSS CSV 🔔 Create Alert Trigger

25 October 2024

Werkzeug Web Server Gateway Interface Vulnerability: Denial of Service Attack via Maliciously Formatted Submission
CVE-2024-49767
PalletsWerkzeug7.5HIGH

6 May 2024

Werkzeug Debugger Vulnerability Allows Attacker to Execute Code on Developer's Machine
CVE-2024-34069
PalletsWerkzeug7.5HIGH

25 October 2023

Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning
CVE-2023-46136
PalletsWerkzeug8HIGH

2 May 2023

Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header
CVE-2023-30861
PalletsFlask👾🟡7.5HIGH

14 February 2023

Werkzeug may allow high resource usage when parsing multipart form data with many fields
CVE-2023-25577
PalletsWerkzeug7.5HIGH

17 July 2019

Denial of Service in Flask by Pallets Project
CVE-2019-1010083
The Pallets ProjectFlask7.5HIGH

No more vulnerabilities to load.