Skip to content
OpenAdvisories

Product · Pylons

Waitress

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2022-31015

    Uncaught Exception (due to a data race) leads to process termination in Waitress

    Waitress is a Web Server Gateway Interface server for Python 2 and 3. Waitress versions 2.1.0 and 2.1.1 may terminate early due to a thread closing a socket while the main thread is about to call select(). This will lead to the main thread raising an exceptio…

    Pylons Waitress waitress waitress Debian Azure Linux Alpine PyPI
  • Medium 5.7
    CVE-2020-5236 Public exploit

    Catastrophic backtracking in regex allows Denial of Service in Waitress

    Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a header like "Bad-header: xxxxxxxxxxxxxxx\x10" is received, it will cause the regular expression engine to catastrophically backtrack causing th…

    Pylons Waitress waitress PyPI