Known vulnerabilities in waitress

Vendor: Pylons Project
Software: waitress
Software CPE: cpe:2.3:a:Pylons:waitress:*:*:*:*:*:*:*:*
Website: https://github.com/Pylons/
Total vulnerabilities: 9
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting waitress waitress is affected by 9 known vulnerabilities: 1 high, 8 medium Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU99623 - Resource exhaustion
CVE-2024-49769		 CWE-400 Medium
No
No
 3.0.1 01.11.2024 SB2024110154
SB20241101104
SB2024110713
and 24 more
#VU99613 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-49768		 CWE-444 Medium
No
No
 3.0.1 01.11.2024 SB2024110154
SB2024110156
SB2024110157
and 23 more
#VU79727 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-16792		 CWE-444 Medium
No
No
 1.4.0 20.08.2023 SB2020012254
SB20230820120
#VU64016 - Uncaught Exception
CVE-2022-31015		 CWE-248 Medium
No
No
 2.1.2 07.06.2022 SB2022060713
#VU61488 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24761		 CWE-444 Medium
No
No
 2.1.1 21.03.2022 SB2022032107
SB2022040525
SB2022040622
and 12 more
#VU34840 - Resource exhaustion
CVE-2020-5236		 CWE-400 Medium
Available
No
 - 04.02.2020 SB2020020439
SB20230820120
#VU33152 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-16789		 CWE-444 High
No
No
 1.4.2 26.12.2019 SB2019122631
SB2020031157
SB2022042259
and 4 more
#VU30507 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-16786		 CWE-444 Medium
No
No
 1.3.1 21.12.2019 SB2019122102
SB2020031156
SB20230820120
and 3 more
#VU33151 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-16785		 CWE-444 Medium
No
No
 1.4.1 21.12.2019 SB2019122103
SB2020031155
SB20230820120
and 3 more