Known vulnerabilities in Gunicorn
Vendor:
Gunicorn
Software:
Gunicorn
Software CPE:
cpe:2.3:a:gunicorn:gunicorn:*:*:*:*:*:*:*:*
Website:
https://gunicorn.org/
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
26.0.0
25.3.0
25.2.0
25.1.0
25.0.3
25.0.2
25.0.1
25.0.0
24.1.1
24.1.0
24.0.0
23.0.0
22.0.0
21.2.0
21.1.0
21.0.1
21.0.0
20.1.0
20.0.4
20.0.3
20.0.2
20.0.1
20.0.0
19.10.0
19.9.0
19.8.1
19.8.0
19.7.1
19.7.0
19.6.0
19.4.4
19.4.3
19.4.2
19.4.1
19.4
19.3
19.2.1
19.2
19.1.1
19.1
19.0
18.0
17.5
0.17.4
0.17.3
0.17.2
0.17.1
0.17.0
0.16.1
0.16.0
0.15.0
0.14.6
0.14.5
0.14.4
0.14.3
0.14.2
0.14.1
0.14.0
0.13.4
0.13.3
0.13.2
0.13.1
0.13.0
0.12.2
0.12.1
0.12.0
0.11.2
0.11.1
0.11.0
0.10.1
0.10.0
0.9.1
0.9.0
0.9
0.8.2
0.8.0
0.7.2
0.7.1
0.7.0
0.7
0.6.7
0.6.6
0.6.4
0.6.3
0.6.2
0.6.1
0.6
0.5.1
0.5
0.4.2
0.4.1
0.4
0.3.2
0.3.1
0.3
0.2.1
0.2
19.4.5
19.5.0
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU107611 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-6827 |
CWE-444 | High | 22.0.0 | 18.04.2025 |
SB2025041831 SB2025041832 SB2025041834 and 15 more |
||
| #VU89167 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-1135 |
CWE-444 | Medium | 22.0.0 | 06.05.2024 |
SB2024050631 SB2024050632 SB2024050633 and 40 more |