Skip to content
OpenAdvisories
High DLA-1357-1 1 CVE

gunicorn - security-update

Published Apr 22, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 gunicorn 0.14.5-3+deb7u2

Vulnerabilities 1

  • High 7.5
    CVE-2018-1000164

    Gunicorn contains Improper Neutralization of CRLF sequences in HTTP headers

    gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in "process_headers" function in "gunicorn/http/wsgi.py" that can result in an attacker causing the server to return arbitrary HTTP headers. Th…

    gunicorn gunicorn gunicorn Debian Ubuntu PyPI