Pylons Waitress vulnerabilities

CVEs per yearBy the year they were published

1. 20193
2. 20202
3. 20222
4. 20242

Newest CVEs

• CVE-2024-49768

  Waitress has request processing race condition in HTTP pipelining with invalid first request

  Pylons · waitress

  Critical9.1
• CVE-2024-49769

  Waitress has a denial of service leading to high CPU usage/resource exhaustion

  Pylons · waitress

  High7.5
• CVE-2022-31015

  Uncaught Exception (due to a data race) leads to process termination in Waitress

  Pylons · waitress

  Medium6.5
• CVE-2022-24761

  HTTP Request Smuggling in waitress

  Pylons · waitress

  High7.5
• CVE-2020-5236

  Catastrophic backtracking in regex allows Denial of Service in Waitress

  Pylons · Waitress

  Medium5.7
• CVE-2019-16792

  HTTP Request Smuggling: Content-Length Sent Twice in Waitress

  Pylons · Waitress

  High7.1
• CVE-2019-16789

  HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers

  Pylons · Waitress

  High7.1
• CVE-2019-16785

  HTTP Request Smuggling: LF vs CRLF handling in Waitress

  Pylons · Waitress

  High7.1
• CVE-2019-16786

  HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress

  Pylons · Waitress

  High7.1