Skip to content
OpenAdvisories
High · 8.0 Public exploit CVE-2023-46136 EUVD-2023-0280GHSA-hrfv-mqp8-q5rwPYSEC-2023-221

Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning

Published Oct 24, 2023 · Updated May 20, 2026 · Assigned by GitHub_M

Vendor: pallets Product: werkzeug Package: airflow Package: airflow-3 Package: airflow-3-bitnami-compat Package: kubeflow-jupyter-web-app Package: kubeflow-pipelines-visualization-server Package: kubeflow-volumes-web-app Package: py3-tensorflow-serving-api Package: py3-werkzeug Package: py3-werkzeug Package: python-werkzeug Package: python-werkzeug Package: werkzeug Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: PyPI Ecosystem: Wolfi

Description

Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8.

Affected products

VendorProductAffectedFixed
pallets werkzeug >= 3.0.0, < 3.0.1, >= 2.0.0rc1, < 2.3.8 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 python-werkzeug 3.0.1-2 —
Debian 13 python-werkzeug 3.0.1-2 —
Debian 12 python-werkzeug 2.2.2-3+deb12u1 —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat Openshift Ironic 4 python-werkzeug +1 2.0.3-5.el9 RHSA-2023:7610, RHSA-2023:7477, RHSA-2023:7473
Red Hat OpenStack 17 python-werkzeug +1 2.0.1-6.el9ost RHSA-2024:0214, RHSA-2024:0189
Red Hat OpenShift 4 cri-o 1.25.5-2.rhaos4.12.git0217273.el8 RHSA-2023:7610
Red Hat OpenShift 4 haproxy +1 2.6.13-2.rhaos4.14.el8 RHSA-2023:7473
Red Hat OpenShift 4 kernel-rt +15 4.18.0-372.82.1.rt7.241.el8_6 RHSA-2023:7610
Red Hat OpenShift 4 openshift +1 4.12.0-202311161331.p0.ga52e8df.assembly.stream.el8 RHSA-2023:7610
Red Hat OpenShift 4 openshift-clients +1 4.12.0-202311221849.p0.gd2ac7e1.assembly.stream.el8 RHSA-2023:7610
Red Hat OpenShift 4 perf +30 4.18.0-372.82.1.el8_6 RHSA-2023:7610
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Ceph Storage 8 ceph +27 2:19.2.1-222.el9cp RHSA-2025:9775
Red Hat Ceph Storage 8 cephadm-ansible 1:4.1.4-1.el9cp RHSA-2025:9775
Red Hat Ceph Storage 8 liboath +1 2.6.12-1.el9cp RHSA-2025:9775

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 3 python-Werkzeug 2.3.6-150400.6.6.1 SUSE-SU-2023:4288-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed python-Werkzeug 3.0.1-1.1 openSUSE-SU-2026:11943-1, openSUSE-SU-2024:13375-1
openSUSE Leap 15.5 python-Werkzeug 2.3.6-150400.6.6.1 SUSE-SU-2023:4288-1
openSUSE Leap 15.4 python-Werkzeug 2.3.6-150400.6.6.1 SUSE-SU-2023:4288-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 py3-werkzeug 2.3.7-r0 —
Alpine v3.23 py3-werkzeug 2.3.7-r0 —
Alpine v3.22 py3-werkzeug 2.3.7-r0 —
Alpine v3.21 py3-werkzeug 2.3.7-r0 —
Alpine v3.20 py3-werkzeug 2.3.7-r0 —
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 py3-werkzeug 2.3.7-r0 —
Alpine v3.18 py3-werkzeug 2.3.7-r0 —

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 python-werkzeug 3.0.1-1 —
Azure Linux 2 (CBL-Mariner) python-werkzeug 2.3.7-1 —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling airflow +1 No fix yet —
Wolfi rolling airflow-3 3.2.0-r0 —
Wolfi rolling kubeflow-jupyter-web-app 1.8.0-r2 —
Wolfi rolling kubeflow-pipelines-visualization-server 2.4.0-r0 —
Wolfi rolling kubeflow-volumes-web-app 1.7.0-r8 —
Wolfi rolling py3-tensorflow-serving-api 2.14.1-r1 —
Wolfi rolling py3-werkzeug 3.0.1-r0 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • JawadPy/WerkGhost ★ 0 · Nov 29, 2025

    Exploit for Werkzeug < 3.1.4 (CVE-2023-46136)

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI werkzeug >= 3.0.0, < 3.0.1 3.0.1 GHSA-hrfv-mqp8-q5rw
PyPI werkzeug >= 2.0.0rc1, < 2.3.8 2.3.8 GHSA-hrfv-mqp8-q5rw
PyPI werkzeug < 2.3.8 · >= 3.0.0, < 3.0.1 2.3.8, 3.0.1 PYSEC-2023-221

Advisories 14

References