Skip to content
OpenAdvisories
High USN-5364-1 1 CVE

waitress vulnerability

Published Apr 5, 2022 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Waitress incorrectly handled certain requests.
An attacker could possibly use this issue to expose sensitive information.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS waitress 1.4.1-1ubuntu0.1

Vulnerabilities 1

  • High 7.5
    CVE-2022-24761

    HTTP Request Smuggling in waitress

    Waitress is a Web Server Gateway Interface server for Python 2 and 3. When using Waitress versions 2.1.0 and prior behind a proxy that does not properly validate the incoming HTTP request matches the RFC7230 standard, Waitress and the frontend proxy may disag…

    Pylons Waitress waitress waitress Debian Ubuntu Azure Linux PyPI

References

  • report
    https://ubuntu.com/security/CVE-2022-24761