Skip to content
OpenAdvisories
Critical DSA-2948-1 1 CVE

python-bottle - security update

Published Jun 4, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 python-bottle 0.10.11-1+deb7u1

Vulnerabilities 1

  • Critical 9.8
    CVE-2014-3137

    Bottle does not properly limit content-types

    Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted Content-Type followed by a ; (semi-colon) and a Content-Ty…

    bottle python-bottle python-bottle Debian Ubuntu PyPI