pylons/waitress Security Advisories | GitStock

critical2024-10-29

Waitress has request processing race condition in HTTP pipelining with invalid first request

GHSA-9298-4cf8-g4wj · CVE-2024-49768

high2024-10-29

Waitress vulnerable to DoS leading to high CPU usage/resource exhaustion

GHSA-3f84-rpwh-47g6 · CVE-2024-49769

high2022-06-02

Uncaught Exception (due to a data race) leads to process termination in Waitress

GHSA-f5x9-8jwc-25rw · CVE-2022-31015

high2022-03-18

HTTP Request Smuggling in waitress

GHSA-4f7p-27jc-3c36 · CVE-2022-24761

medium2020-02-04

Catastrophic backtracking in regex allows Denial of Service in Waitress

GHSA-73m2-3pwg-5fgc · CVE-2020-5236

medium2020-01-06

HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers (Follow-up)

GHSA-968f-66r5-5v74 · CVE-2019-16789

critical2019-12-20

HTTP Request Smuggling: Content-Length Sent Twice in Waitress

GHSA-4ppp-gpcr-7qf6 · CVE-2019-16792

medium2019-12-20

HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress

GHSA-g2xc-35jw-c63p · CVE-2019-16786

medium2019-12-20

HTTP Request Smuggling: LF vs CRLF handling in Waitress

GHSA-pg36-wpm5-g57p · CVE-2019-16785