Skip to content
OpenAdvisories

Package · Debian

python-werkzeug

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2024-49767

    Werkzeug possible resource exhaustion when parsing file data in forms

    Werkzeug is a Web Server Gateway Interface web application library. Applications using `werkzeug.formparser.MultiPartParser` corresponding to a version of Werkzeug prior to 3.0.6 to parse `multipart/form-data` requests (e.g. all flask applications) are vulner…

    pallets werkzeug Quart werkzeug Debian Ubuntu Alpine PyPI
  • Medium 6.1
    CVE-2020-28724

    Open Redirect in werkzeug

    Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL.

    werkzeug python-werkzeug python-werkzeug Debian Ubuntu PyPI
  • Medium 6.1
    CVE-2016-10516

    Pallets Werkzeug cross-site scripting vulnerability

    Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (as used in Pallets Flask and other products) allows remote attackers to inject arbitrary web script or HTML via a fiel…

    werkzeug python-werkzeug python-werkzeug Debian Ubuntu PyPI