Skip to content
OpenAdvisories

Package · Debian

waitress

8 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.1

    Waitress has request processing race condition in HTTP pipelining with invalid first request

    Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may send a request that is exactly recv_bytes (defaults to 8192) long, followed by a secondary request using HTTP pipelining. When request lookahead is disabled (default) we…