Skip to content
OpenAdvisories

Product · benoitc

benoitc/gunicorn

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2024-6827

    HTTP Request Smuggling in benoitc/gunicorn

    Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerabili…

    benoitc benoitc/gunicorn emissary emissary-apiext Debian Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2024-1135

    HTTP Request Smuggling in benoitc/gunicorn

    Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints…

    benoitc benoitc/gunicorn reflex gunicorn Debian Ubuntu Wolfi PyPI