Skip to content
OpenAdvisories
High USN-4022-1 1 CVE

Gunicorn vulnerability

Published Jun 19, 2019 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that gunicorn improperly handled certain input. An attacker
could potentially use this issue execute a cross-site scripting (XSS) attack.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS gunicorn 19.4.5-1ubuntu1.1

Vulnerabilities 1

  • High 7.5
    CVE-2018-1000164

    Gunicorn contains Improper Neutralization of CRLF sequences in HTTP headers

    gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in "process_headers" function in "gunicorn/http/wsgi.py" that can result in an attacker causing the server to return arbitrary HTTP headers. Th…

    gunicorn gunicorn gunicorn Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2018-1000164