Skip to content
OpenAdvisories

Package · Ubuntu

python-werkzeug

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-102598

    Werkzeug safe_join() allows Windows special device names

    Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safe_join function used by send_from_directory can allow a NUL: special-device path because safe_join checks the Windows device name without first removing an empty NTFS ADS marker.…

    pallets werkzeug werkzeug python-werkzeug Ubuntu PyPI
  • Medium 6.9
    CVE-2024-49767

    Werkzeug possible resource exhaustion when parsing file data in forms

    Werkzeug is a Web Server Gateway Interface web application library. Applications using `werkzeug.formparser.MultiPartParser` corresponding to a version of Werkzeug prior to 3.0.6 to parse `multipart/form-data` requests (e.g. all flask applications) are vulner…

    pallets werkzeug Quart werkzeug Debian Ubuntu Alpine PyPI
  • Medium 6.1
    CVE-2020-28724

    Open Redirect in werkzeug

    Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL.

    werkzeug python-werkzeug python-werkzeug Debian Ubuntu PyPI
  • Medium 6.1
    CVE-2016-10516

    Pallets Werkzeug cross-site scripting vulnerability

    Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (as used in Pallets Flask and other products) allows remote attackers to inject arbitrary web script or HTML via a fiel…

    werkzeug python-werkzeug python-werkzeug Debian Ubuntu PyPI