Skip to content
OpenAdvisories

Package · Ubuntu

python-werkzeug

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2024-34069 Public exploit

    Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution

    Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a…

    pallets werkzeug werkzeug python-werkzeug Debian Ubuntu PyPI