Skip to content
OpenAdvisories
High DSA-5138-1 1 CVE

waitress - security update

Published May 17, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 10 waitress 1.2.0~b2-2+deb10u1
Debian · 11 waitress 1.4.4-1.1+deb11u1

Vulnerabilities 1

  • High 7.5
    CVE-2022-24761

    HTTP Request Smuggling in waitress

    Waitress is a Web Server Gateway Interface server for Python 2 and 3. When using Waitress versions 2.1.0 and prior behind a proxy that does not properly validate the incoming HTTP request matches the RFC7230 standard, Waitress and the frontend proxy may disag…

    Pylons Waitress waitress waitress Debian Ubuntu Azure Linux PyPI