High DLA-4062-1 1 CVE

python-werkzeug - security update

Published Feb 21, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	python-werkzeug	1.0.1+dfsg1-2+deb11u2

Vulnerabilities 1

High 7.5

CVE-2024-34069 Public exploit

Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution

Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a…

pallets werkzeug airflow-3 kubeflow-pipelines-visualization-server Debian Ubuntu Azure Linux Wolfi PyPI

May 6, 2024