| Werkzeug safe_join() allows Windows special device namesCVE-2026-102598 · GHSA-G6X2-HCCM-HH4MVersion ranges need review. |
werkzeugRed Hat OpenShift AI (RHOAI)/rhoai/odh-mlflow-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Werkzeug safe_join() allows Windows special device namesCVE-2026-27199 · GHSA-29VQ-49WR-VM6XVersion ranges need review. |
werkzeug |
PyPI |
Medium
|
Fix reported |
|
| Werkzeug safe_join() allows Windows special device names with compound extensionsCVE-2026-21860 · GHSA-87HC-H4R5-73F7Version ranges need review. |
werkzeug |
PyPI |
Medium
|
Fix reported |
|
| Werkzeug safe_join() allows Windows special device namesCVE-2025-66221 · GHSA-HGF8-39GV-G3F2Version ranges need review. |
werkzeug |
PyPI |
Medium
|
Fix reported |
|
| Werkzeug possible resource exhaustion when parsing file data in formsCVE-2024-49767 · GHSA-Q34M-JH98-GWM2Version ranges need review. |
quartwerkzeug |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Werkzeug safe_join not safe on WindowsCVE-2024-49766 · GHSA-F9VJ-2WH5-FJ8JVersion ranges need review. |
werkzeug |
PyPI |
Medium
|
Fix reported |
|
| Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domainCVE-2024-34069 · GHSA-2G68-C3QC-8985Version ranges need review. |
werkzeugRed Hat Ceph Storage 5/python-werkzeug |
PyPIRed Hat |
High
|
Fix reported |
|
| Incorrect parsing of nameless cookies leads to __Host- cookies bypassCVE-2023-23934 · GHSA-PX8H-6QXV-M22QVersion ranges need review. |
werkzeugRed Hat Enterprise Linux 7/python-werkzeug |
PyPIRed Hat |
Low
|
Fix reported |
|
| Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginningCVE-2023-46136 · GHSA-HRFV-MQP8-Q5RWVersion ranges need review. |
werkzeugRed Hat Ceph Storage 5/python-werkzeug |
PyPIRed Hat |
Medium
|
Fix reported |
|
| High resource usage when parsing multipart form data with many fieldsCVE-2023-25577 · GHSA-XG9F-G7G7-2323Version ranges need review. |
werkzeugRed Hat Enterprise Linux 7/python-werkzeug |
PyPIRed Hat |
High
|
Fix reported |
|
| Pallets Werkzeug vulnerable to Path TraversalCVE-2019-14322 · GHSA-J544-7Q9P-6XP8Version ranges need review. |
werkzeug |
PyPI |
High
|
Fix reported |
|
| Pallets Werkzeug cross-site scripting vulnerabilityCVE-2016-10516 · GHSA-H2FP-XGX6-XH6FVersion ranges need review. |
werkzeugRed Hat Ceph Storage 1.3/python-werkzeug |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Open Redirect in werkzeugCVE-2020-28724 · GHSA-3P3H-QGHP-HVH2Version ranges need review. |
werkzeugRed Hat Ceph Storage 2/python-werkzeug |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Pallets Werkzeug Insufficient EntropyCVE-2019-14806 · GHSA-GQ9M-QVPX-68HCVersion ranges need review. |
werkzeugRed Hat OpenStack Platform 14 (Rocky)/python-werkzeug |
PyPIRed Hat |
High
|
Fix reported |
|
| PYSEC-2022-203CVE-2022-29361 · PYSEC-2022-203 |
werkzeug |
PyPI |
Unknown
|
Fix reported |
|
