Palletsprojects vulnerabilities
We track 3 vulnerabilities in Palletsprojects products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 25, 2024.
Latest Palletsprojects vulnerabilities
- 7.5 High severity
werkzeug: Uncontrolled Resource Consumption
Werkzeug is a Web Server Gateway Interface web application library. Applications using `werkzeug.formparser.MultiPartParser` corresponding to a version of Werkzeug prior to 3.0.6 to parse `multipart/form-data` requests (e.g. all flask applications) are vulnera
- 7.5 High severity
werkzeug: Cross-Site Request Forgery
Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a
- 9.8 Critical severity
Werkzeug: Inconsistent Interpretation of HTTP Requests
Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body. NOTE: the vendor's position is that this behavior can only o