https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:02:14 +0000 https://cve.radiocsirt.org/vuln/cve-2022-29361 <p>Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body. NOTE: the vendor&#39;s position is that this behavior can only occur in unsupported configurations involving development mode and an HTTP server from outside the Werkzeug project</p> <p>Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body. NOTE: the vendor&#39;s position is that this behavior can only occur in unsupported configurations involving development mode and an HTTP server from outside the Werkzeug project</p> https://cve.radiocsirt.org/vuln/cve-2022-29361 https://cve.radiocsirt.org/vuln/pysec-2022-203 <p><strong>Affected:</strong> PyPI: werkzeug</p> <p>** DISPUTED ** Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body. NOTE: the vendor&#39;s position is that this behavior can only occur in unsupported configurations involving development mode and an HTTP server from outside the Werkzeug project.</p> <p><strong>Affected:</strong> PyPI: werkzeug</p> <p>** DISPUTED ** Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body. NOTE: the vendor&#39;s position is that this behavior can only occur in unsupported configurations involving development mode and an HTTP server from outside the Werkzeug project.</p> https://cve.radiocsirt.org/vuln/pysec-2022-203