Skip to content
OpenAdvisories
High DSA-4186-1 1 CVE

gunicorn - security update

Published Apr 28, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 gunicorn 19.0-1+deb8u1

Vulnerabilities 1

  • High 7.5
    CVE-2018-1000164

    Gunicorn contains Improper Neutralization of CRLF sequences in HTTP headers

    gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in "process_headers" function in "gunicorn/http/wsgi.py" that can result in an attacker causing the server to return arbitrary HTTP headers. Th…

    gunicorn gunicorn gunicorn Debian Ubuntu PyPI