Skip to content
OpenAdvisories

Package · Debian

webpy

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • High 8.5
    CVE-2026-79310

    webpy web.py 0.76 is vulnerable to server-side template injection (SSTI). The template engine can be tricked into execu…

    webpy webpy Debian Ubuntu
  • Critical 9.8
    CVE-2026-79313

    webpy web.py 0.76 is vulnerable to Insufficient Session Expiration. The application's session management relies on peri…

    webpy webpy Debian Ubuntu
  • Medium 6.1
    CVE-2026-79311

    webpy web.py 0.76 is vulnerable to Cross Site Scripting (XSS) via render_jinja.__init__().

    webpy webpy Debian Ubuntu
  • Medium 6.8
    CVE-2026-79312

    webpy web.py 0.76 is vulnerable to Session Fixation. The component Session._load() reads session_id directly from the r…

    webpy webpy Debian Ubuntu
  • Medium 6.3
    CVE-2025-3818

    webpy web.py db.py PostgresDB._process_insert_query sql injection

    A vulnerability, which was classified as critical, was found in webpy web.py 0.70. Affected is the function PostgresDB._process_insert_query of the file web/db.py. The manipulation of the argument seqname leads to sql injection. It is possible to launch the a…

    webpy web.py webpy webpy Debian Ubuntu