CyberSecBulletin

Pylons vulnerabilities

We track 2 vulnerabilities in Pylons products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2024.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Pylons vulnerabilities

  • 7.5 High severity

    waitress: Missing Release of Resource after Effective Lifetime

    CVE-2024-49769PylonsEPSS 1.38%

    Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunity to call getpeername() waitress won't correctly clean up the connection leading to the main thread attemptin

  • 7.5 High severity

    waitress: Inconsistent Interpretation of HTTP Requests

    CVE-2022-24761PylonsEPSS 1.78%

    Waitress is a Web Server Gateway Interface server for Python 2 and 3. When using Waitress versions 2.1.0 and prior behind a proxy that does not properly validate the incoming HTTP request matches the RFC7230 standard, Waitress and the frontend proxy may disagr