Every CVE Search/ Get API key

CVE-2024-6827

HTTP Request Smuggling in benoitc/gunicorn

7.5 HighFix available

Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.81%Up 0.8 points since Mar 20, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.5

HTTP Request Smuggling in benoitc/gunicorn

Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.

Record
CVE-2024-6827
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-444
Updated
2026-11-02
EUVDEUVD-2025-6969 7.5

Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.

Record
EUVD-2025-6969
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-hc5x-x2vx-497g 7.5

Gunicorn HTTP Request/Response Smuggling vulnerability

Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.

Record
GHSA-hc5x-x2vx-497g
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-444
Updated
2026-11-02
NVD 7.5

Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.

Record
CVE-2024-6827
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-444
Updated
2026-11-02
OSVDEBIAN-CVE-2024-6827 7.5

Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.

Record
DEBIAN-CVE-2024-6827
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVGHSA-hc5x-x2vx-497g 7.5

Gunicorn HTTP Request/Response Smuggling vulnerability

Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.

Record
GHSA-hc5x-x2vx-497g
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-444
Updated
2026-11-02
Show 14 moreShow less
OSVOESA-2026-3657 7.5

python-gunicorn security update

Gunicorn(Green Unicorn) is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn_ project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy.

Security Fix(es):

Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.(CVE-2024-6827)

Record
OESA-2026-3657
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVOESA-2026-3659 7.5

python-gunicorn security update

Gunicorn(Green Unicorn) is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn_ project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy.

Security Fix(es):

Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks including cache poisoning, session manipulation, and data exposure.(CVE-2024-1135)

Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.(CVE-2024-6827)

Record
OESA-2026-3659
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVOESA-2026-3660 7.5

python-gunicorn security update

Gunicorn(Green Unicorn) is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn_ project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy.

Security Fix(es):

Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.(CVE-2024-6827)

Record
OESA-2026-3660
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVOESA-2026-3724 7.5

python-gunicorn security update

Gunicorn(Green Unicorn) is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn_ project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy.

Security Fix(es):

Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.(CVE-2024-6827)

Record
OESA-2026-3724
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVPYSEC-2026-1433 7.5

Gunicorn HTTP Request/Response Smuggling vulnerability

Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.

Record
PYSEC-2026-1433
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVROOT-APP-PYPI-CVE-2024-6827 7.5

CVE-2024-6827 in rootio-gunicorn - Patched by Root

Root has patched CVE-2024-6827 in the rootio-gunicorn package for Root:PyPI. Multiple fixed versions available.

Record
ROOT-APP-PYPI-CVE-2024-6827
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2024-6827 7.5

Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.

Record
UBUNTU-CVE-2024-6827
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVCLSA-2026-1772496718 No score

TuxCare security update for gunicorn (1 CVE)

TuxCare rebuilt gunicorn to address 1 CVE. Fixed in 20.0.4.post2+tuxcare.

Record
CLSA-2026-1772496718
Updated
2026-11-02
OSVCLSA-2026-1772496719 No score

TuxCare security update for gunicorn (3 CVEs)

TuxCare rebuilt gunicorn to address 3 CVEs. Fixed in 20.1.0.post1+tuxcare.

Record
CLSA-2026-1772496719
Updated
2026-11-02
OSVCLSA-2026-1772496721 No score

TuxCare security update for gunicorn (3 CVEs)

TuxCare rebuilt gunicorn to address 3 CVEs. Fixed in 21.2.0.post2+tuxcare.

Record
CLSA-2026-1772496721
Updated
2026-11-02
OSVCLSA-2026-1772496723 No score

TuxCare security update for gunicorn (2 CVEs)

TuxCare rebuilt gunicorn to address 2 CVEs. Fixed in 22.0.0.post1+tuxcare.

Record
CLSA-2026-1772496723
Updated
2026-11-02
OSV No score

Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.

Record
CVE-2024-6827
Updated
2026-11-02
OSVSUSE-SU-2025:1002-1 No score

Security update for python-gunicorn

This update for python-gunicorn fixes the following issues:

  • CVE-2024-6827: Fixed improper validation of the 'Transfer-Encoding' header value can allow for HTTP request smuggling attacks (bsc#1239830)
Record
SUSE-SU-2025:1002-1
Updated
2026-11-02
OSVSUSE-SU-2025:1008-1 No score

Security update for python-gunicorn

This update for python-gunicorn fixes the following issues:

  • CVE-2024-6827: Fixed improper validation of the 'Transfer-Encoding' header value can allow for HTTP request smuggling attacks (bsc#1239830)
Record
SUSE-SU-2025:1008-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gunicorn
PyPI
 before 22.0.0
22.0.0
gunicorn
TuxCare:PyPI
 20.0.4 up to 20.0.4.post2+tuxcare, plus listed versions
20.0.4.post1+tuxcare
20.0.4.post2+tuxcare
gunicorn
TuxCare:PyPI
From an advisory covering 2 CVEs
 20.1.0 up to 20.1.0.post1+tuxcare
20.1.0.post1+tuxcare
gunicorn
TuxCare:PyPI
From an advisory covering 2 CVEs
 21.2.0 up to 21.2.0.post2+tuxcare
21.2.0.post2+tuxcare
gunicorn
TuxCare:PyPI
 22.0.0 up to 22.0.0.post1+tuxcare
22.0.0.post1+tuxcare
gunicorn
Debian:12
 All versions, plus listed versions
20.1.0-620.1.0-6+deb12u122.0.0-123.0.0-125.0.3-1
Show 8 moreShow less
25.0.3-225.1.0-125.3.0-125.3.0-225.3.0-325.3.0-426.2.2-126.2.2-2
 None known
gunicorn
Debian:13
 before 23.0.0-1
23.0.0-1
gunicorn
Debian:14
 before 23.0.0-1
23.0.0-1
gunicorn
PyPI
 before 22.0.0, plus listed versions
0.10.10.00.10.10.11.00.11.1
Show 45 moreShow less
0.11.20.12.00.12.10.12.20.13.00.13.10.13.20.13.30.13.40.14.00.14.10.14.20.14.30.14.40.14.50.14.60.15.00.16.00.16.10.17.00.17.10.17.20.17.30.17.40.20.2.10.30.3.10.3.20.40.4.10.4.20.50.5.10.60.6.10.6.20.6.30.6.40.6.50.6.60.7.00.7.10.7.20.8.0
22.0.0
python-gunicorn
openEuler:24.03-LTS-SP3
 before 21.2.0-2.oe2403sp3
21.2.0-2.oe2403sp3
Show 28 moreShow less
Affected packages
PackageAffectedFixed
python-gunicorn
openEuler:22.03-LTS-SP4
From an advisory covering 2 CVEs
 before 20.1.0-2.oe2203sp4
20.1.0-2.oe2203sp4
python-gunicorn
openEuler:24.03-LTS-SP1
 before 21.2.0-2.oe2403sp1
21.2.0-2.oe2403sp1
python-gunicorn
openEuler:24.03-LTS-SP4
 before 21.2.0-3.oe2403sp4
21.2.0-3.oe2403sp4
rootio-gunicorn
Root:PyPI
 before 21.2.0+root.io.1
21.2.0+root.io.120.1.0+root.io.120.1.0+root.io.221.2.0+root.io.2
gunicorn
Root:PyPI
 before 20.1.0+aikido.2
20.1.0+aikido.221.2.0+aikido.2
python-gunicorn
SUSE:Linux Enterprise Module for Public Cloud 15 SP3
 before 19.7.1-150000.3.10.1
19.7.1-150000.3.10.1
python-gunicorn
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
 before 19.7.1-150000.3.10.1
19.7.1-150000.3.10.1
python-gunicorn
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
 before 19.7.1-150000.3.10.1
19.7.1-150000.3.10.1
python-gunicorn
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
 before 19.7.1-150000.3.10.1
19.7.1-150000.3.10.1
python-gunicorn
SUSE:Linux Enterprise Module for Python 3 15 SP6
 before 20.1.0-150400.12.9.1
20.1.0-150400.12.9.1
python-gunicorn
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 20.1.0-150400.12.9.1
20.1.0-150400.12.9.1
python-gunicorn
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 20.1.0-150400.12.9.1
20.1.0-150400.12.9.1
python-gunicorn
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 20.1.0-150400.12.9.1
20.1.0-150400.12.9.1
python-gunicorn
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 20.1.0-150400.12.9.1
20.1.0-150400.12.9.1
python-gunicorn
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 20.1.0-150400.12.9.1
20.1.0-150400.12.9.1
python-gunicorn
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 20.1.0-150400.12.9.1
20.1.0-150400.12.9.1
python-gunicorn
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 20.1.0-150400.12.9.1
20.1.0-150400.12.9.1
python-gunicorn
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 20.1.0-150400.12.9.1
20.1.0-150400.12.9.1
python-gunicorn
openSUSE:Leap 15.6
 before 20.1.0-150400.12.9.1
20.1.0-150400.12.9.1
gunicorn
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
17.5-217.5-2build117.5-2ubuntu0.1~esm1
 None known
gunicorn
Ubuntu:16.04:LTS
 All versions, plus listed versions
19.0-8ubuntu119.4.1-1ubuntu119.4.5-1ubuntu119.4.5-1ubuntu1.1
 None known
gunicorn
Ubuntu:18.04:LTS
 All versions, plus listed versions
19.7.1-319.7.1-4
 None known
gunicorn
Ubuntu:20.04:LTS
 All versions, plus listed versions
19.9.0-119.9.0-420.0.0-120.0.2-120.0.4-120.0.4-220.0.4-3
 None known
gunicorn
Ubuntu:22.04:LTS
 All versions, plus listed versions
20.1.0-120.1.0-2
 None known
gunicorn
Ubuntu:24.04:LTS
 All versions, plus listed versions
20.1.0-620.1.0-6ubuntu0.1
 None known
gunicorn
Ubuntu:25.10
 All versions, plus listed versions
23.0.0-1
 None known
gunicorn
Ubuntu:26.10
 All versions, plus listed versions
25.1.0-125.3.0-225.3.0-325.3.0-4
 None known
gunicorn
Ubuntu:26.04:LTS
 All versions, plus listed versions
23.0.0-123.0.0-1build125.0.3-225.1.0-1
 None known

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-6827 is a high vulnerability (CVSS 7.5) in Benoitc Benoitc/gunicorn, published March 20, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.81%, the 57th percentile. Fixed in gunicorn 22.0.0.

References

Show 15 moreShow less
This page doesn't list everything

Left out here: 35 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open