High DSA-4142-1 1 CVE

uwsgi - security update

Published Mar 17, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 8	uwsgi	2.0.7-1+deb8u2
Debian · 9	uwsgi	2.0.14+20161117-3+deb9u2

Vulnerabilities 1

High 7.5

CVE-2018-7490 Public exploit Scanner template EPSS 69%

uWSGI Directory Traversal vulnerability

uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.

uwsgi uwsgi uwsgi uwsgi Debian Ubuntu Alpine PyPI

Feb 26, 2018