Skip to content
OpenAdvisories

Vendor

Pylons

14 known vulnerabilities.

Products

Waitress 9 webob 3 horus 1 pyramid 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.7
    CVE-2020-5236 Public exploit

    Catastrophic backtracking in regex allows Denial of Service in Waitress

    Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a header like "Bad-header: xxxxxxxxxxxxxxx\x10" is received, it will cause the regular expression engine to catastrophically backtrack causing th…

    Pylons Waitress waitress PyPI