Skip to content
OpenAdvisories

Package · PyPI

quart

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    GHSA-v853-p72q-4cfw

    Quart leaks raw request body (incl. plaintext passwords) to stdout via stray debug print in Body.__await__

    ### Summary Quart 0.23.0 contains a stray debug statement (`print(data)`) inside `Body.__await__` in `quart/wrappers/request.py`. Any request whose body is awaited — `await request.form`, `await request.get_data()`, WTForms `validate_on_submit()`, etc. — has …

    quart PyPI