web2py vulnerabilities

4 published CVEs name web2py among the affected products.

Critical 1High 0Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-25198
web2py versions 2.27.1-stable+timestamp.2023.11.16.08.03.57 and prior contain an open redirect vulnerability. If this vulnerability is exploited, the user may…
web2py · web2py
Medium5.1
CVE-2023-45158
An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifySendHandler for logging (not the default…
web2py · web2py
Critical9.8
CVE-2023-22432
Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary website by…
web2py · web2py
Medium6.1
CVE-2022-33146
Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing…
web2py · web2py
Medium6.1