Skip to content
OpenAdvisories
High DLA-2056-1 1 CVE

waitress - security update

Published Jan 1, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 waitress 0.8.9-2+deb8u1

Vulnerabilities 1

  • High 7.1
    CVE-2019-16789

    HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers

    In Waitress through version 1.4.0, if a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress leading to a potential for HTTP request smuggling. Specially cra…

    Pylons Waitress waitress waitress Debian Ubuntu Alpine PyPI