waitress vulnerabilities

CVEs whose affected-version data names the waitress package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

4 CVEsRSS

CVE-2020-5236Medium· 5.7PoC

Catastrophic backtracking in regex allows Denial of Service in Waitress

Catastrophic backtracking in regex allows Denial of Service in Waitress

▾ Twilightwaitress · waitressEPSS 2.4%via OSV

CVE-2019-16785High· 7.1

HTTP Request Smuggling: LF vs CRLF handling in Waitress

HTTP Request Smuggling: LF vs CRLF handling in Waitress

▾ Twilightwaitress · waitressEPSS 2.5%via OSV

CVE-2019-16786High· 7.1

HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress

HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress

▾ Twilightwaitress · waitressEPSS 2.4%via OSV

CVE-2019-16792Critical

HTTP Request Smuggling: Content-Length Sent Twice in Waitress

HTTP Request Smuggling: Content-Length Sent Twice in Waitress

▾ Midnightwaitress · waitressEPSS 2.0%via OSV

waitress vulnerabilities (CVEs) · VulnSea