gunicorn vulnerabilities
CVEs whose affected-version data names the gunicorn package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2024-6827High· 7.5Gunicorn HTTP Request/Response Smuggling vulnerability
Gunicorn HTTP Request/Response Smuggling vulnerability
▾ Twilightgunicorn · gunicornEPSS 0.79%via OSV
CVE-2024-1135High· 8.2Request smuggling leading to endpoint restriction bypass in Gunicorn
Request smuggling leading to endpoint restriction bypass in Gunicorn
▾ Twilightgunicorn · gunicornEPSS 3.0%via OSV
CVE-2018-1000164High· 7.5Gunicorn contains Improper Neutralization of CRLF sequences in HTTP headers
Gunicorn contains Improper Neutralization of CRLF sequences in HTTP headers
▾ Twilightgunicorn · gunicornEPSS 2.5%via OSV