Pylons vulnerabilities

CVEs per yearBy the year they were published

1. 20193
2. 20202
3. 20222
4. 20232
5. 20243
6. 20262

Newest CVEs

• CVE-2026-54770

  WebOb: Open redirect in Location header normalization via leading C0 control / space characters

  Pylons · webob

  Medium6.1
• CVE-2026-44889

  WebOb: Location header normalization during redirect leads to open redirect

  Pylons · webob

  Medium6.1
• CVE-2024-49768

  Waitress has request processing race condition in HTTP pipelining with invalid first request

  Pylons · waitress

  Critical9.1
• CVE-2024-49769

  Waitress has a denial of service leading to high CPU usage/resource exhaustion

  Pylons · waitress

  High7.5
• CVE-2024-42353

  WebOb's location header normalization during redirect leads to open redirect

  Pylons · webob

  Medium6.1
• CVE-2023-40587

  Pyramid static view path traversal up one directory

  Pylons · pyramid

  Medium4.3
• CVE-2014-125056

  Pylons horus services.py timing discrepancy

  Pylons · horus

  Low2.6
• CVE-2022-31015

  Uncaught Exception (due to a data race) leads to process termination in Waitress

  Pylons · waitress

  Medium6.5
• CVE-2022-24761

  HTTP Request Smuggling in waitress

  Pylons · waitress

  High7.5
• CVE-2020-5236

  Catastrophic backtracking in regex allows Denial of Service in Waitress

  Pylons · Waitress

  Medium5.7