gunicorn vulnerabilities

1 known vulnerability in gunicorn from Benoitc. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  benoitc/gunicorn: Inconsistent Interpretation of HTTP Requests

  CVE-2024-1135Apr 16, 2024BenoitcEPSS 3%

  Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints.