Low
CVE-2025-24023
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 36
Reset filters
Medium
CVE-2023-46136
Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning
High
CVE-2023-25577
High resource usage when parsing multipart form data with many fields
Low
CVE-2023-23934
Incorrect parsing of nameless cookies leads to __Host- cookies bypass
Unrated
CVE-2022-29361
** DISPUTED ** Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included in
Medium
CVE-2021-23401
Open Redirect in Flask-User
Medium
CVE-2021-23393
Open redirect in Flask-Unchained
Low
CVE-2021-32618
Open Redirect in Flask-Security-Too
Medium
CVE-2020-28724
Open Redirect in werkzeug
High
CVE-2019-14806
Pallets Werkzeug Insufficient Entropy
Medium
CVE-2019-1020006
Invenio-App vulnerable to host header injection attack
Medium
CVE-2016-10516
Pallets Werkzeug cross-site scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.