Every CVE Search/ Get API key

CVE-2023-46136

Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning

8.0 HighPublic exploitFix available

Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.29%Up 1.2 points since Oct 25, 2023
90%50%10%1%

What each source reports

CVE List Score used 8.0

Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning

Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8.

Record
CVE-2023-46136
CVSS 3.1
8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-407, CWE-400
Updated
2026-11-02
EUVDEUVD-2023-0280 8.0

Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8.

Record
EUVD-2023-0280
CVSS 3.1
8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-hrfv-mqp8-q5rw 5.7

Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning

Werkzeug multipart data parser needs to find a boundary that may be between consecutive chunks. That's why parsing is based on looking for newline characters. Unfortunately, code looking for partial boundary in the buffer is written inefficiently, so if we upload a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer.

This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. The amount of RAM required can trigger an out of memory kill of the process. If many concurrent requests are sent continuously, this can exhaust or kill all available workers.

Record
GHSA-hrfv-mqp8-q5rw
CVSS 3.1
5.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400, CWE-787
Updated
2026-11-02
NVD 8.0

Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8.

Record
CVE-2023-46136
CVSS 3.1
8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400, CWE-407, CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2023-46136 7.5

Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8.

Record
ALPINE-CVE-2023-46136
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVAZL-31701 7.5

CVE-2023-46136 affecting package python-werkzeug for versions less than 2.3.7-1

Werkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1.

Record
AZL-31701
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 22 moreShow less
OSVAZL-35141 7.5

CVE-2023-46136 affecting package python-werkzeug for versions less than 3.0.1-1

Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8.

Record
AZL-35141
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 8.0

Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning

Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8.

Record
CVE-2023-46136
CVSS 3.1
8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-400, CWE-407
Updated
2026-11-02
OSVDEBIAN-CVE-2023-46136 7.5

Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8.

Record
DEBIAN-CVE-2023-46136
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVGHSA-hrfv-mqp8-q5rw 5.7

Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning

Werkzeug multipart data parser needs to find a boundary that may be between consecutive chunks. That's why parsing is based on looking for newline characters. Unfortunately, code looking for partial boundary in the buffer is written inefficiently, so if we upload a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer.

This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. The amount of RAM required can trigger an out of memory kill of the process. If many concurrent requests are sent continuously, this can exhaust or kill all available workers.

Record
GHSA-hrfv-mqp8-q5rw
CVSS 3.1
5.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400, CWE-787
Updated
2026-11-02
OSVOESA-2025-1996 7.5

python-werkzeug security update

A comprehensive WSGI web application library

Security Fix(es):

Werkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1.(CVE-2023-46136)

Record
OESA-2025-1996
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1997 7.5

python-werkzeug security update

A comprehensive WSGI web application library

Security Fix(es):

Werkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1.(CVE-2023-46136)

Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.(CVE-2024-34069)

Record
OESA-2025-1997
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1998 7.5

python-werkzeug security update

A comprehensive WSGI web application library

Security Fix(es):

Werkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1.(CVE-2023-46136)

Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.(CVE-2024-34069)

Record
OESA-2025-1998
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1999 7.5

python-werkzeug security update

A comprehensive WSGI web application library

Security Fix(es):

Werkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1.(CVE-2023-46136)

Record
OESA-2025-1999
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2000 7.5

python-werkzeug security update

A comprehensive WSGI web application library

Security Fix(es):

Werkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1.(CVE-2023-46136)

Record
OESA-2025-2000
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVPYSEC-2023-221 7.5

Werkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1.

Record
PYSEC-2023-221
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:7473 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.14.4 packages and security update

Record
RHSA-2023:7473
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:7477 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.13.24 packages and security update

Record
RHSA-2023:7477
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:7610 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.12.45 packages and security update

Record
RHSA-2023:7610
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:0189 7.5

Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-werkzeug) security update

Record
RHSA-2024:0189
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:0214 7.5

Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-werkzeug) security update

Record
RHSA-2024:0214
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:9775 7.5

Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security, bug fix, and enhancement updates

Record
RHSA-2025:9775
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-APP-PYPI-CVE-2023-46136 5.7

CVE-2023-46136 in Werkzeug - Patched by Root

Root has patched CVE-2023-46136 in the Werkzeug package for Root:PyPI. Multiple fixed versions available.

Record
ROOT-APP-PYPI-CVE-2023-46136
CVSS 3.1
5.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1773360968 No score

TuxCare security update for werkzeug (1 CVE)

TuxCare rebuilt werkzeug to address 1 CVE. Fixed in 1.0.1.post4+tuxcare.

Record
CLSA-2026-1773360968
Updated
2026-11-02
OSVCLSA-2026-1773360969 No score

TuxCare security update for werkzeug (1 CVE)

TuxCare rebuilt werkzeug to address 1 CVE. Fixed in 2.2.3.post4+tuxcare.

Record
CLSA-2026-1773360969
Updated
2026-11-02
OSVopenSUSE-SU-2024:13375-1 No score

python310-Werkzeug-3.0.1-1.1 on GA media

These are all security issues fixed in the python310-Werkzeug-3.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13375-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:11943-1 No score

python313-Werkzeug-3.1.9-1.1 on GA media

These are all security issues fixed in the python313-Werkzeug-3.1.9-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11943-1
Updated
2026-11-02
OSVSUSE-SU-2023:4288-1 No score

Security update for python-Werkzeug

This update for python-Werkzeug fixes the following issues:

  • CVE-2023-46136: Fixed a potential denial of service via large multipart file uploads (bsc#1216581).
Record
SUSE-SU-2023:4288-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
werkzeug
PyPI
 3.0.0 up to 3.0.1
3.0.1
werkzeug
PyPI
 2.0.0rc1 up to 2.3.8
2.3.8
py3-werkzeug
Alpine:v3.18
 before 2.3.7-r0
2.3.7-r0
py3-werkzeug
Alpine:v3.19
 before 2.3.7-r0
2.3.7-r0
py3-werkzeug
Alpine:v3.20
 before 2.3.7-r0
2.3.7-r0
py3-werkzeug
Alpine:v3.21
 before 2.3.7-r0
2.3.7-r0
py3-werkzeug
Alpine:v3.22
 before 2.3.7-r0
2.3.7-r0
py3-werkzeug
Alpine:v3.23
 before 2.3.7-r0
2.3.7-r0
py3-werkzeug
Alpine:v3.24
 before 2.3.7-r0
2.3.7-r0
python-werkzeug
Azure Linux:2
 before 2.3.7-1
2.3.7-1
Show 171 moreShow less
Affected packages
PackageAffectedFixed
python-werkzeug
Azure Linux:3
 before 3.0.1-1
3.0.1-1
werkzeug
TuxCare:PyPI
 1.0.1 up to 1.0.1.post4+tuxcare, plus listed versions
1.0.1.post1+tuxcare1.0.1.post2+tuxcare1.0.1.post3+tuxcare
1.0.1.post4+tuxcare
werkzeug
TuxCare:PyPI
 2.2.3 up to 2.2.3.post4+tuxcare, plus listed versions
2.2.3.post1+tuxcare2.2.3.post3+tuxcare
2.2.3.post4+tuxcare
python-werkzeug
Debian:12
 before 2.2.2-3+deb12u1, plus listed versions
2.2.2-3
2.2.2-3+deb12u1
python-werkzeug
Debian:13
 before 3.0.1-2
3.0.1-2
python-werkzeug
Debian:14
 before 3.0.1-2
3.0.1-2
werkzeug
PyPI
 2.0.0rc1 up to 2.3.8, plus listed versions
2.0.02.0.0rc22.0.0rc32.0.0rc42.0.0rc5
Show 19 moreShow less
2.0.12.0.22.0.32.1.02.1.12.1.22.2.02.2.0a12.2.12.2.22.2.32.3.02.3.12.3.22.3.32.3.42.3.52.3.62.3.7
2.3.8
python-werkzeug
openEuler:24.03-LTS-SP2
 before 2.2.3-4.oe2403sp2
2.2.3-4.oe2403sp2
python-werkzeug
openEuler:22.03-LTS-SP3
From an advisory covering 2 CVEs
 before 2.0.3-6.oe2203sp3
2.0.3-6.oe2203sp3
python-werkzeug
openEuler:22.03-LTS-SP4
From an advisory covering 2 CVEs
 before 2.0.3-6.oe2203sp4
2.0.3-6.oe2203sp4
python-werkzeug
openEuler:24.03-LTS
 before 2.2.3-4.oe2403
2.2.3-4.oe2403
python-werkzeug
openEuler:24.03-LTS-SP1
 before 2.2.3-4.oe2403sp1
2.2.3-4.oe2403sp1
werkzeug
PyPI
 before 2.3.8, 3.0.0 up to 3.0.1, plus listed versions
0.10.100.10.10.10.20.10.3
Show 45 moreShow less
0.10.40.110.11.10.11.100.11.110.11.120.11.130.11.140.11.150.11.20.11.30.11.40.11.50.11.60.11.70.11.80.11.90.120.12.10.12.20.130.140.14.10.15.00.15.10.15.20.15.30.15.40.15.50.15.60.16.00.16.10.20.30.3.10.40.4.10.50.5.10.60.6.10.6.20.70.7.10.7.2
2.3.83.0.1
python-werkzeug
Red Hat:openshift_ironic:4.14::el9
From an advisory covering 3 CVEs
 before 0:2.2.3-2.el9
0:2.2.3-2.el9
python3-werkzeug
Red Hat:openshift_ironic:4.14::el9
From an advisory covering 3 CVEs
 before 0:2.2.3-2.el9
0:2.2.3-2.el9
haproxy
Red Hat:openshift:4.14::el8
From an advisory covering 3 CVEs
 before 0:2.6.13-2.rhaos4.14.el8
0:2.6.13-2.rhaos4.14.el8
haproxy-debugsource
Red Hat:openshift:4.14::el8
From an advisory covering 3 CVEs
 before 0:2.6.13-2.rhaos4.14.el8
0:2.6.13-2.rhaos4.14.el8
haproxy26
Red Hat:openshift:4.14::el8
From an advisory covering 3 CVEs
 before 0:2.6.13-2.rhaos4.14.el8
0:2.6.13-2.rhaos4.14.el8
haproxy26-debuginfo
Red Hat:openshift:4.14::el8
From an advisory covering 3 CVEs
 before 0:2.6.13-2.rhaos4.14.el8
0:2.6.13-2.rhaos4.14.el8
python-werkzeug
Red Hat:openshift_ironic:4.13::el9
 before 0:2.0.3-5.el9
0:2.0.3-5.el9
python3-werkzeug
Red Hat:openshift_ironic:4.13::el9
 before 0:2.0.3-5.el9
0:2.0.3-5.el9
bpftool
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
bpftool-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
cri-o
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:1.25.5-2.rhaos4.12.git0217273.el8
0:1.25.5-2.rhaos4.12.git0217273.el8
cri-o-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:1.25.5-2.rhaos4.12.git0217273.el8
0:1.25.5-2.rhaos4.12.git0217273.el8
cri-o-debugsource
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:1.25.5-2.rhaos4.12.git0217273.el8
0:1.25.5-2.rhaos4.12.git0217273.el8
kernel
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-core
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-debug
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-debug-core
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-debug-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-debug-devel
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-debug-modules
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-debug-modules-extra
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-debug-modules-internal
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-debuginfo-common-aarch64
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-debuginfo-common-ppc64le
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-debuginfo-common-s390x
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-debuginfo-common-x86_64
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-devel
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-doc
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-ipaclones-internal
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-modules
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-modules-extra
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-modules-internal
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-rt
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.rt7.241.el8_6
0:4.18.0-372.82.1.rt7.241.el8_6
kernel-rt-core
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.rt7.241.el8_6
0:4.18.0-372.82.1.rt7.241.el8_6
kernel-rt-debug
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.rt7.241.el8_6
0:4.18.0-372.82.1.rt7.241.el8_6
kernel-rt-debug-core
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.rt7.241.el8_6
0:4.18.0-372.82.1.rt7.241.el8_6
kernel-rt-debug-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.rt7.241.el8_6
0:4.18.0-372.82.1.rt7.241.el8_6
kernel-rt-debug-devel
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.rt7.241.el8_6
0:4.18.0-372.82.1.rt7.241.el8_6
kernel-rt-debug-kvm
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.rt7.241.el8_6
0:4.18.0-372.82.1.rt7.241.el8_6
kernel-rt-debug-modules
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.rt7.241.el8_6
0:4.18.0-372.82.1.rt7.241.el8_6
kernel-rt-debug-modules-extra
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.rt7.241.el8_6
0:4.18.0-372.82.1.rt7.241.el8_6
kernel-rt-debug-modules-internal
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.rt7.241.el8_6
0:4.18.0-372.82.1.rt7.241.el8_6
kernel-rt-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.rt7.241.el8_6
0:4.18.0-372.82.1.rt7.241.el8_6
kernel-rt-debuginfo-common-x86_64
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.rt7.241.el8_6
0:4.18.0-372.82.1.rt7.241.el8_6
kernel-rt-devel
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.rt7.241.el8_6
0:4.18.0-372.82.1.rt7.241.el8_6
kernel-rt-kvm
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.rt7.241.el8_6
0:4.18.0-372.82.1.rt7.241.el8_6
kernel-rt-modules
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.rt7.241.el8_6
0:4.18.0-372.82.1.rt7.241.el8_6
kernel-rt-modules-extra
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.rt7.241.el8_6
0:4.18.0-372.82.1.rt7.241.el8_6
kernel-rt-modules-internal
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.rt7.241.el8_6
0:4.18.0-372.82.1.rt7.241.el8_6
kernel-rt-selftests-internal
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.rt7.241.el8_6
0:4.18.0-372.82.1.rt7.241.el8_6
kernel-selftests-internal
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-tools
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-tools-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-tools-libs
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-tools-libs-devel
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-zfcpdump
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-zfcpdump-core
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-zfcpdump-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-zfcpdump-devel
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-zfcpdump-modules
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-zfcpdump-modules-extra
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
kernel-zfcpdump-modules-internal
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
openshift
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.12.0-202311161331.p0.ga52e8df.assembly.stream.el8
0:4.12.0-202311161331.p0.ga52e8df.assembly.stream.el8
openshift-clients
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.12.0-202311221849.p0.gd2ac7e1.assembly.stream.el8
0:4.12.0-202311221849.p0.gd2ac7e1.assembly.stream.el8
openshift-clients-redistributable
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.12.0-202311221849.p0.gd2ac7e1.assembly.stream.el8
0:4.12.0-202311221849.p0.gd2ac7e1.assembly.stream.el8
openshift-hyperkube
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.12.0-202311161331.p0.ga52e8df.assembly.stream.el8
0:4.12.0-202311161331.p0.ga52e8df.assembly.stream.el8
perf
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
perf-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
python3-perf
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
python3-perf-debuginfo
Red Hat:openshift:4.12::el8
From an advisory covering 3 CVEs
 before 0:4.18.0-372.82.1.el8_6
0:4.18.0-372.82.1.el8_6
openshift
Red Hat:openshift:4.12::el9
From an advisory covering 3 CVEs
 before 0:4.12.0-202311161331.p0.ga52e8df.assembly.stream.el9
0:4.12.0-202311161331.p0.ga52e8df.assembly.stream.el9
openshift-clients
Red Hat:openshift:4.12::el9
From an advisory covering 3 CVEs
 before 0:4.12.0-202311221849.p0.gd2ac7e1.assembly.stream.el9
0:4.12.0-202311221849.p0.gd2ac7e1.assembly.stream.el9
openshift-clients-redistributable
Red Hat:openshift:4.12::el9
From an advisory covering 3 CVEs
 before 0:4.12.0-202311221849.p0.gd2ac7e1.assembly.stream.el9
0:4.12.0-202311221849.p0.gd2ac7e1.assembly.stream.el9
openshift-hyperkube
Red Hat:openshift:4.12::el9
From an advisory covering 3 CVEs
 before 0:4.12.0-202311161331.p0.ga52e8df.assembly.stream.el9
0:4.12.0-202311161331.p0.ga52e8df.assembly.stream.el9
python-werkzeug
Red Hat:openshift_ironic:4.12::el9
From an advisory covering 3 CVEs
 before 0:2.0.3-5.el9
0:2.0.3-5.el9
python3-werkzeug
Red Hat:openshift_ironic:4.12::el9
From an advisory covering 3 CVEs
 before 0:2.0.3-5.el9
0:2.0.3-5.el9
python-werkzeug
Red Hat:openstack:17.1::el8
 before 0:2.0.1-8.el8ost
0:2.0.1-8.el8ost
python3-werkzeug
Red Hat:openstack:17.1::el8
 before 0:2.0.1-8.el8ost
0:2.0.1-8.el8ost
python-werkzeug
Red Hat:openstack:17.1::el9
 before 0:2.0.1-6.el9ost
0:2.0.1-6.el9ost
python3-werkzeug
Red Hat:openstack:17.1::el9
 before 0:2.0.1-6.el9ost
0:2.0.1-6.el9ost
ceph
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-base
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-base-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-common
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-common-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-debugsource
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-exporter-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-fuse
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-fuse-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-immutable-object-cache
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-immutable-object-cache-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-mds-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-mgr-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-mib
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-mon-client-nvmeof-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-mon-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-osd-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-radosgw-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-resource-agents
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-selinux
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-test-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
cephadm
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
cephadm-ansible
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 1:4.1.4-1.el9cp
1:4.1.4-1.el9cp
cephfs-mirror-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
cephfs-top
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephfs-daemon-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephfs-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephfs-proxy2
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephfs-proxy2-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephfs2
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephfs2-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephsqlite-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
liboath
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
liboath-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
libpskc-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
librados-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librados-devel-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librados2
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librados2-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libradospp-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libradosstriper1
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libradosstriper1-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librbd-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librbd1
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librbd1-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librgw-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librgw2
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librgw2-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
oath-toolkit
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
oath-toolkit-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
oath-toolkit-debugsource
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
oathtool-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
pam_oath-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
pskctool-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
python3-ceph-argparse
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-ceph-common
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-cephfs
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-cephfs-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-rados
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-rados-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-rbd
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-rbd-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-rgw
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-rgw-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
rbd-fuse-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
rbd-mirror-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
rbd-nbd
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
rbd-nbd-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
Werkzeug
Root:PyPI
 before 2.3.7+aikido.6
2.3.7+aikido.62.2.3+aikido.32.2.3+aikido.42.2.3+aikido.5
rootio-Werkzeug
Root:PyPI
 before 2.3.7+root.io.4
2.3.7+root.io.42.3.7+root.io.52.2.3+root.io.22.3.7+root.io.62.2.3+root.io.3
python-Werkzeug
SUSE:Linux Enterprise Module for Python 3 15 SP4
 before 2.3.6-150400.6.6.1
2.3.6-150400.6.6.1
python-Werkzeug
SUSE:Linux Enterprise Module for Python 3 15 SP5
 before 2.3.6-150400.6.6.1
2.3.6-150400.6.6.1
python-Werkzeug
openSUSE:Leap 15.4
 before 2.3.6-150400.6.6.1
2.3.6-150400.6.6.1
python-Werkzeug
openSUSE:Leap 15.5
 before 2.3.6-150400.6.6.1
2.3.6-150400.6.6.1
python-Werkzeug
openSUSE:Tumbleweed
 before 3.0.1-1.1
3.0.1-1.1
python-Werkzeug
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
 before 3.1.9-1.1
3.1.9-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubJawadPy/WerkGhost2025-11-29

History

History
RecordedChangedSources
affected, facts
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-46136 is a high vulnerability (CVSS 8.0) in Pallets Werkzeug, published October 24, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.29%, the 70th percentile. Fixed in werkzeug 3.0.1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 39 versions and 208 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open