Skip to content
OpenAdvisories
High DLA-3851-1 1 CVE

gunicorn - security update

Published Jun 30, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 gunicorn 19.9.0-1+deb10u1

Vulnerabilities 1

  • High 7.5
    CVE-2024-1135

    HTTP Request Smuggling in benoitc/gunicorn

    Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints…

    benoitc benoitc/gunicorn reflex gunicorn Debian Ubuntu Wolfi PyPI