Skip to content
OpenAdvisories

Package · Ubuntu

python-werkzeug

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2024-34069 Public exploit

    Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution

    Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a…

    pallets werkzeug werkzeug python-werkzeug Debian Ubuntu PyPI
  • High 7.5
    CVE-2023-25577

    Werkzeug may allow high resource usage when parsing multipart form data with many fields

    Werkzeug is a comprehensive WSGI web application library. Prior to version 2.2.3, Werkzeug's multipart form data parser will parse an unlimited number of parts, including file parts. Parts can be a small amount of bytes, but each requires CPU time to parse an…

    pallets werkzeug werkzeug python-werkzeug Debian Ubuntu PyPI
  • High 7.5
    CVE-2019-14806

    Pallets Werkzeug Insufficient Entropy

    Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id.

    werkzeug python-werkzeug python-werkzeug Debian Ubuntu PyPI