Every CVE Search/ Get API key

CVE-2024-34069

Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution

7.5 HighPublic exploitFix available

Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

3.40%Up 3.4 points since May 7, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.5

Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution

Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.

Record
CVE-2024-34069
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-352
Updated
2026-11-02
EUVDEUVD-2024-1358 7.5

Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.

Record
EUVD-2024-1358
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-2g68-c3qc-8985 7.5

Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain

The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger.

Record
GHSA-2g68-c3qc-8985
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-352
Updated
2026-11-02
NVD 7.5

Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.

Record
CVE-2024-34069
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-352
Updated
2026-11-02
OSV 7.5

Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution

Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.

Record
CVE-2024-34069
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-352
Updated
2026-11-02
OSVDEBIAN-CVE-2024-34069 7.5

Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.

Record
DEBIAN-CVE-2024-34069
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 30 moreShow less
OSVGHSA-2g68-c3qc-8985 7.5

Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain

The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger.

Record
GHSA-2g68-c3qc-8985
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-352
Updated
2026-11-02
OSVOESA-2025-1997 7.5

python-werkzeug security update

A comprehensive WSGI web application library

Security Fix(es):

Werkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1.(CVE-2023-46136)

Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.(CVE-2024-34069)

Record
OESA-2025-1997
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1998 7.5

python-werkzeug security update

A comprehensive WSGI web application library

Security Fix(es):

Werkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1.(CVE-2023-46136)

Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.(CVE-2024-34069)

Record
OESA-2025-1998
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2060 7.5

python-werkzeug security update

A comprehensive WSGI web application library

Security Fix(es):

Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.(CVE-2024-34069)

Record
OESA-2025-2060
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVPYSEC-2026-2043 7.5

Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain

The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger.

Record
PYSEC-2026-2043
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:10696 7.5

Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-werkzeug) security update

Record
RHSA-2024:10696
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:5810 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.12.64 security update

Record
RHSA-2024:5810
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:6016 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.15.30 packages and security update

Record
RHSA-2024:6016
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:9975 7.5

Red Hat Security Advisory: RHOSP 17.1.4 (python-werkzeug) security update

Record
RHSA-2024:9975
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:9976 7.5

Red Hat Security Advisory: RHOSP 17.1.4 (python-werkzeug) security update

Record
RHSA-2024:9976
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:4664 9.1

Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security, bug fix, and enhancement updates

Record
RHSA-2025:4664
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVROOT-APP-PYPI-CVE-2024-34069 7.5

CVE-2024-34069 in Werkzeug - Patched by Root

Root has patched CVE-2024-34069 in the Werkzeug package for Root:PyPI. Multiple fixed versions available.

Record
ROOT-APP-PYPI-CVE-2024-34069
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-34069 7.5

Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.

Record
UBUNTU-CVE-2024-34069
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-40372 No score

CVE-2024-34069 affecting package python-werkzeug for versions less than 3.0.3-1

Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.

Record
AZL-40372
Updated
2026-11-02
OSVAZL-40466 No score

CVE-2024-34069 affecting package python-werkzeug for versions less than 2.3.7-2

Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.

Record
AZL-40466
Updated
2026-11-02
OSVCLSA-2026-1772410264 No score

TuxCare security update for werkzeug (2 CVEs)

TuxCare rebuilt werkzeug to address 2 CVEs. Fixed in 1.0.1.post2+tuxcare.

Record
CLSA-2026-1772410264
Updated
2026-11-02
OSVCLSA-2026-1772410380 No score

TuxCare security update for werkzeug (2 CVEs)

TuxCare rebuilt werkzeug to address 2 CVEs. Fixed in 2.2.3.post1+tuxcare.

Record
CLSA-2026-1772410380
Updated
2026-11-02
OSVCLSA-2026-1782176240 No score

TuxCare security update for werkzeug (1 CVE)

TuxCare rebuilt werkzeug to address 1 CVE. Fixed in 2.3.8.post2+tuxcare.

Record
CLSA-2026-1782176240
Updated
2026-11-02
OSVCLSA-2026-1789452814 No score

TuxCare security update for werkzeug (3 CVEs)

TuxCare rebuilt werkzeug to address 3 CVEs. Fixed in 2.2.3.post5+tuxcare.

Record
CLSA-2026-1789452814
Updated
2026-11-02
OSVCLSA-2026-1791187847 No score

TuxCare security update for werkzeug (2 CVEs)

TuxCare rebuilt werkzeug to address 2 CVEs. Fixed in 0.16.1.post1+tuxcare.

Record
CLSA-2026-1791187847
Updated
2026-11-02
OSVMGASA-2024-0234 No score

Updated python-werkzeug packages fix security vulnerability

Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.

Record
MGASA-2024-0234
Updated
2026-11-02
OSVopenSUSE-SU-2024:14042-1 No score

python310-Werkzeug-3.0.3-1.1 on GA media

These are all security issues fixed in the python310-Werkzeug-3.0.3-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14042-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:11943-1 No score

python313-Werkzeug-3.1.9-1.1 on GA media

These are all security issues fixed in the python313-Werkzeug-3.1.9-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11943-1
Updated
2026-11-02
OSVSUSE-SU-2024:1572-1 No score

Security update for python-Werkzeug

This update for python-Werkzeug fixes the following issues:

  • CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979).
Record
SUSE-SU-2024:1572-1
Updated
2026-11-02
OSVSUSE-SU-2024:1591-1 No score

Security update for python-Werkzeug

This update for python-Werkzeug fixes the following issues:

  • CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979).
Record
SUSE-SU-2024:1591-1
Updated
2026-11-02
OSVSUSE-SU-2024:1591-2 No score

Security update for python-Werkzeug

This update for python-Werkzeug fixes the following issues:

  • CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979).
Record
SUSE-SU-2024:1591-2
Updated
2026-11-02
OSVSUSE-SU-2024:1608-1 No score

Security update for python-Werkzeug

This update for python-Werkzeug fixes the following issues:

  • CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979).
Record
SUSE-SU-2024:1608-1
Updated
2026-11-02
OSVSUSE-SU-2024:1624-1 No score

Security update for python-Werkzeug

This update for python-Werkzeug fixes the following issues:

  • CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979).
Record
SUSE-SU-2024:1624-1
Updated
2026-11-02
OSVSUSE-SU-2024:1624-2 No score

Security update for python-Werkzeug

This update for python-Werkzeug fixes the following issues:

  • CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979).
Record
SUSE-SU-2024:1624-2
Updated
2026-11-02
OSVUSN-6799-1 No score

python-werkzeug vulnerability

It was discovered that the debugger in Werkzeug was not restricted to trusted hosts. A remote attacker could possibly use this issue to execute code on the host under certain circumstances.

Record
USN-6799-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
werkzeug
PyPI
 before 3.0.3
3.0.3
python-werkzeug
Azure Linux:3
 before 3.0.3-1
3.0.3-1
python-werkzeug
Azure Linux:2
 before 2.3.7-2
2.3.7-2
werkzeug
TuxCare:PyPI
 1.0.1 up to 1.0.1.post2+tuxcare, plus listed versions
1.0.1.post1+tuxcare
1.0.1.post2+tuxcare
werkzeug
TuxCare:PyPI
 2.2.3 up to 2.2.3.post1+tuxcare
2.2.3.post1+tuxcare
werkzeug
TuxCare:PyPI
 2.3.8 up to 2.3.8.post2+tuxcare, plus listed versions
2.3.8.post1+tuxcare
2.3.8.post2+tuxcare
werkzeug
TuxCare:PyPI
From an advisory covering 3 CVEs
 2.2.3 up to 2.2.3.post5+tuxcare, plus listed versions
2.2.3.post1+tuxcare2.2.3.post3+tuxcare2.2.3.post4+tuxcare
2.2.3.post5+tuxcare
werkzeug
TuxCare:PyPI
From an advisory covering 2 CVEs
 0.16.1 up to 0.16.1.post1+tuxcare
0.16.1.post1+tuxcare
python-werkzeug
Debian:12
 before 2.2.2-3+deb12u1, plus listed versions
2.2.2-3
2.2.2-3+deb12u1
python-werkzeug
Debian:13
 before 3.0.3-1
3.0.3-1
Show 190 moreShow less
Affected packages
PackageAffectedFixed
python-werkzeug
Debian:14
 before 3.0.3-1
3.0.3-1
python-werkzeug
Debian:11
 before 1.0.1+dfsg1-2+deb11u2, plus listed versions
1.0.1+dfsg1-21.0.1+dfsg1-2+deb11u1
1.0.1+dfsg1-2+deb11u2
werkzeug
PyPI
 before 3.0.3, plus listed versions
0.10.100.10.10.10.20.10.3
Show 45 moreShow less
0.10.40.110.11.10.11.100.11.110.11.120.11.130.11.140.11.150.11.20.11.30.11.40.11.50.11.60.11.70.11.80.11.90.120.12.10.12.20.130.140.14.10.15.00.15.10.15.20.15.30.15.40.15.50.15.60.16.00.16.10.20.30.3.10.40.4.10.50.5.10.60.6.10.6.20.70.7.10.7.2
3.0.3
python-werkzeug
Mageia:9
 before 3.0.3-1.mga9
3.0.3-1.mga9
python-werkzeug
openEuler:22.03-LTS-SP3
From an advisory covering 2 CVEs
 before 2.0.3-6.oe2203sp3
2.0.3-6.oe2203sp3
python-werkzeug
openEuler:22.03-LTS-SP4
From an advisory covering 2 CVEs
 before 2.0.3-6.oe2203sp4
2.0.3-6.oe2203sp4
python-werkzeug
openEuler:20.03-LTS-SP4
 before 1.0.1-3.oe2003sp4
1.0.1-3.oe2003sp4
python-werkzeug
Red Hat:openstack:16.2::el8
 before 0:0.14.1-13.el8ost
0:0.14.1-13.el8ost
python3-werkzeug
Red Hat:openstack:16.2::el8
 before 0:0.14.1-13.el8ost
0:0.14.1-13.el8ost
openshift
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.12.0-202408131833.p0.g1eb8682.assembly.stream.el8
0:4.12.0-202408131833.p0.g1eb8682.assembly.stream.el8
openshift-hyperkube
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.12.0-202408131833.p0.g1eb8682.assembly.stream.el8
0:4.12.0-202408131833.p0.g1eb8682.assembly.stream.el8
openshift
Red Hat:openshift:4.12::el9
From an advisory covering 3 CVEs
 before 0:4.12.0-202408131833.p0.g1eb8682.assembly.stream.el9
0:4.12.0-202408131833.p0.g1eb8682.assembly.stream.el9
openshift-hyperkube
Red Hat:openshift:4.12::el9
From an advisory covering 3 CVEs
 before 0:4.12.0-202408131833.p0.g1eb8682.assembly.stream.el9
0:4.12.0-202408131833.p0.g1eb8682.assembly.stream.el9
python-jinja2
Red Hat:openshift_ironic:4.12::el9
From an advisory covering 3 CVEs
 before 0:3.0.1-3.el9.1
0:3.0.1-3.el9.1
python3-jinja2
Red Hat:openshift_ironic:4.12::el9
From an advisory covering 3 CVEs
 before 0:3.0.1-3.el9.1
0:3.0.1-3.el9.1
python-werkzeug
Red Hat:openshift_ironic:4.12::el9
From an advisory covering 3 CVEs
 before 0:2.0.3-6.el9
0:2.0.3-6.el9
python3-werkzeug
Red Hat:openshift_ironic:4.12::el9
From an advisory covering 3 CVEs
 before 0:2.0.3-6.el9
0:2.0.3-6.el9
python-werkzeug
Red Hat:openshift_ironic:4.15::el9
 before 0:2.2.3-3.el9
0:2.2.3-3.el9
python3-werkzeug
Red Hat:openshift_ironic:4.15::el9
 before 0:2.2.3-3.el9
0:2.2.3-3.el9
python-werkzeug
Red Hat:openstack:17.1::el8
 before 0:2.0.1-9.el8ost
0:2.0.1-9.el8ost
python3-werkzeug
Red Hat:openstack:17.1::el8
 before 0:2.0.1-9.el8ost
0:2.0.1-9.el8ost
python-werkzeug
Red Hat:openstack:17.1::el9
 before 0:2.0.1-7.el9ost
0:2.0.1-7.el9ost
python3-werkzeug
Red Hat:openstack:17.1::el9
 before 0:2.0.1-7.el9ost
0:2.0.1-7.el9ost
liboath
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 0:2.6.12-1.el8cp
0:2.6.12-1.el8cp
liboath-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 0:2.6.12-1.el8cp
0:2.6.12-1.el8cp
libpskc-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 0:2.6.12-1.el8cp
0:2.6.12-1.el8cp
oath-toolkit
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 0:2.6.12-1.el8cp
0:2.6.12-1.el8cp
oath-toolkit-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 0:2.6.12-1.el8cp
0:2.6.12-1.el8cp
oath-toolkit-debugsource
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 0:2.6.12-1.el8cp
0:2.6.12-1.el8cp
oathtool-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 0:2.6.12-1.el8cp
0:2.6.12-1.el8cp
pam_oath-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 0:2.6.12-1.el8cp
0:2.6.12-1.el8cp
pskctool-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 0:2.6.12-1.el8cp
0:2.6.12-1.el8cp
liboath
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
liboath-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
libpskc-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
oath-toolkit
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
oath-toolkit-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
oath-toolkit-debugsource
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
oathtool-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
pam_oath-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
pskctool-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
ceph
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-base
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-base-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-common
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-common-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-debugsource
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-exporter-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-fuse
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-fuse-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-immutable-object-cache
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-immutable-object-cache-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-mds-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-mgr-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-mib
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-mon-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-osd-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-radosgw-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-resource-agents
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-selinux
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph-test-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
cephfs-mirror-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
cephfs-top
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
libcephfs-devel
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
libcephfs2
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
libcephfs2-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
libcephsqlite-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
librados-devel
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
librados-devel-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
librados2
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
librados2-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
libradospp-devel
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
libradosstriper1
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
libradosstriper1-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
librbd-devel
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
librbd1
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
librbd1-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
librgw-devel
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
librgw2
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
librgw2-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
python3-ceph-argparse
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
python3-ceph-common
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
python3-cephfs
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
python3-cephfs-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
python3-rados
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
python3-rados-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
python3-rbd
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
python3-rbd-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
python3-rgw
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
python3-rgw-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
rbd-fuse-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
rbd-mirror-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
rbd-nbd
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
rbd-nbd-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el8cp
2:18.2.1-329.el8cp
ceph
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-base
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-base-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-common
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-common-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-debugsource
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-exporter-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-fuse
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-fuse-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-immutable-object-cache
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-immutable-object-cache-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-mds-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-mgr-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-mib
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-mon-client-nvmeof-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-mon-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-osd-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-radosgw-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-resource-agents
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-selinux
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
ceph-test-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
cephadm
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
cephfs-mirror-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
cephfs-top
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
libcephfs-devel
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
libcephfs2
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
libcephfs2-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
libcephsqlite-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
librados-devel
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
librados-devel-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
librados2
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
librados2-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
libradospp-devel
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
libradosstriper1
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
libradosstriper1-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
librbd-devel
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
librbd1
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
librbd1-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
librgw-devel
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
librgw2
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
librgw2-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
python3-ceph-argparse
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
python3-ceph-common
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
python3-cephfs
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
python3-cephfs-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
python3-rados
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
python3-rados-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
python3-rbd
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
python3-rbd-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
python3-rgw
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
python3-rgw-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
rbd-fuse-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
rbd-mirror-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
rbd-nbd
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
rbd-nbd-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 9 CVEs
 before 2:18.2.1-329.el9cp
2:18.2.1-329.el9cp
Werkzeug
Root:PyPI
 before 2.1.2+aikido.4
2.1.2+aikido.42.3.7+aikido.62.2.3+aikido.32.1.2+aikido.52.2.3+aikido.42.1.2+aikido.62.2.3+aikido.5
rootio-Werkzeug
Root:PyPI
 before 2.3.7+root.io.1
2.3.7+root.io.12.1.2+root.io.12.2.3+root.io.12.3.7+root.io.22.3.7+root.io.32.3.7+root.io.42.3.7+root.io.52.1.2+root.io.22.1.2+root.io.32.2.3+root.io.22.1.2+root.io.42.3.7+root.io.62.2.3+root.io.3
rootio-werkzeug
Root:PyPI
 before 2.2.3+root.io.2
2.2.3+root.io.2
python-Werkzeug
SUSE:Linux Enterprise Module for Public Cloud 12
 before 0.12.2-10.16.1
0.12.2-10.16.1
python-Werkzeug
SUSE:Linux Enterprise Module for Python 3 15 SP5
 before 2.3.6-150400.6.9.1
2.3.6-150400.6.9.1
python-Werkzeug
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 2.3.6-150400.6.9.1
2.3.6-150400.6.9.1
python-Werkzeug
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 2.3.6-150400.6.9.1
2.3.6-150400.6.9.1
python-Werkzeug
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 2.3.6-150400.6.9.1
2.3.6-150400.6.9.1
python-Werkzeug
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 2.3.6-150400.6.9.1
2.3.6-150400.6.9.1
python-Werkzeug
openSUSE:Leap 15.5
 before 2.3.6-150400.6.9.1
2.3.6-150400.6.9.1
python-Werkzeug
openSUSE:Leap 15.6
 before 2.3.6-150400.6.9.1
2.3.6-150400.6.9.1
python-Werkzeug
SUSE:Linux Enterprise Module for Python 3 15 SP6
 before 2.3.6-150400.6.9.1
2.3.6-150400.6.9.1
python-Werkzeug
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 0.14.1-150100.6.9.1
0.14.1-150100.6.9.1
python-Werkzeug
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 0.14.1-150100.6.9.1
0.14.1-150100.6.9.1
python-Werkzeug
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 0.14.1-150100.6.9.1
0.14.1-150100.6.9.1
python-Werkzeug-doc
openSUSE:Leap 15.5
 before 0.14.1-150100.6.9.1
0.14.1-150100.6.9.1
python-Werkzeug-doc
openSUSE:Leap 15.6
 before 0.14.1-150100.6.9.1
0.14.1-150100.6.9.1
python-Werkzeug
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 1.0.1-150300.3.8.1
1.0.1-150300.3.8.1
python-Werkzeug
SUSE:Linux Enterprise Module for Package Hub 15 SP5
 before 1.0.1-150300.3.8.1
1.0.1-150300.3.8.1
python-Werkzeug
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 1.0.1-150300.3.8.1
1.0.1-150300.3.8.1
python-Werkzeug
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 1.0.1-150300.3.8.1
1.0.1-150300.3.8.1
python-Werkzeug
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 1.0.1-150300.3.8.1
1.0.1-150300.3.8.1
python-Werkzeug
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 1.0.1-150300.3.8.1
1.0.1-150300.3.8.1
python-Werkzeug
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 1.0.1-150300.3.8.1
1.0.1-150300.3.8.1
python-Werkzeug
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 1.0.1-150300.3.8.1
1.0.1-150300.3.8.1
python-Werkzeug
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 1.0.1-150300.3.8.1
1.0.1-150300.3.8.1
python-Werkzeug
SUSE:Manager Proxy 4.3
 before 1.0.1-150300.3.8.1
1.0.1-150300.3.8.1
python-Werkzeug
SUSE:Manager Server 4.3
 before 1.0.1-150300.3.8.1
1.0.1-150300.3.8.1
python-Werkzeug
SUSE:Enterprise Storage 7.1
 before 1.0.1-150300.3.8.1
1.0.1-150300.3.8.1
python-Werkzeug
openSUSE:Leap 15.5
 before 1.0.1-150300.3.8.1
1.0.1-150300.3.8.1
python-Werkzeug
SUSE:Linux Enterprise Module for Basesystem 15 SP6
 before 1.0.1-150300.3.8.1
1.0.1-150300.3.8.1
python-Werkzeug
SUSE:Linux Enterprise Module for Package Hub 15 SP6
 before 1.0.1-150300.3.8.1
1.0.1-150300.3.8.1
python-werkzeug
Ubuntu:Pro:16.04:LTS
 before 0.10.4+dfsg1-1ubuntu1.2+esm2, plus listed versions
0.10.4+dfsg1-1ubuntu10.10.4+dfsg1-1ubuntu1.10.10.4+dfsg1-1ubuntu1.20.10.4+dfsg1-1ubuntu1.2+esm1
0.10.4+dfsg1-1ubuntu1.2+esm2
python-werkzeug
Ubuntu:Pro:18.04:LTS
 before 0.14.1+dfsg1-1ubuntu0.2+esm1, plus listed versions
0.12.2+dfsg1-20.13+dfsg1-10.14.1+dfsg1-10.14.1+dfsg1-1ubuntu0.10.14.1+dfsg1-1ubuntu0.2
0.14.1+dfsg1-1ubuntu0.2+esm1
python-werkzeug
Ubuntu:20.04:LTS
 before 0.16.1+dfsg1-2ubuntu0.2, plus listed versions
0.14.1+dfsg1-40.15.6+dfsg1-10.16.0+dfsg1-10.16.1+dfsg1-1ubuntu10.16.1+dfsg1-20.16.1+dfsg1-2ubuntu0.1
0.16.1+dfsg1-2ubuntu0.2
python-werkzeug
Ubuntu:22.04:LTS
 before 2.0.2+dfsg1-1ubuntu0.22.04.2, plus listed versions
1.0.1+dfsg1-22.0.2+dfsg1-12.0.2+dfsg1-1ubuntu0.22.04.1
2.0.2+dfsg1-1ubuntu0.22.04.2
python-werkzeug
Ubuntu:24.04:LTS
 before 3.0.1-3ubuntu0.1, plus listed versions
2.2.2-33.0.1-13.0.1-23.0.1-3
3.0.1-3ubuntu0.1
python-Werkzeug
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 3.0.3-1.1
3.0.3-1.1
python-Werkzeug
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
 before 3.1.9-1.1
3.1.9-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitPallete Projects Werkzeug Debugger Remote Code Execution2015-06-28

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, Metasploit, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-34069 is a high vulnerability (CVSS 7.5) in Pallets Werkzeug, published May 6, 2024. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.40%, the 88th percentile. Fixed in werkzeug 3.0.3.

References

Show 130 moreShow less
This page doesn't list everything

Left out here: 43 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open