{"id":"CVE-2022-31799","aliases":["ALPINE-CVE-2022-31799","DEBIAN-CVE-2022-31799","DLA-3048-1","DSA-5159-1","EUVD-2022-0032","GHSA-xhp9-4947-rq78","MGASA-2022-0245","OESA-2022-1712","PYSEC-2022-227","SUSE-SU-2022:3103-1","UBUNTU-CVE-2022-31799","USN-5532-1","USN-5532-2","openSUSE-SU-2024:13210-1"],"status":"published","title":"Denial of service in bottle","description":"Bottle before 0.12.20 mishandles errors during early request binding.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02136,"percentile":0.82138,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-755"],"published":"2022-05-29T21:25:44Z","modified":"2026-11-03T08:03:53Z","fixes":[{"ecosystem":"PyPI","package":"bottle","fixed_in":["0.12.20"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.16","package":"py3-bottle","fixed_in":["0.12.21-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"py3-bottle","fixed_in":["0.12.21-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"py3-bottle","fixed_in":["0.12.21-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"py3-bottle","fixed_in":["0.12.21-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"py3-bottle","fixed_in":["0.12.21-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"py3-bottle","fixed_in":["0.12.21-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"py3-bottle","fixed_in":["0.12.21-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"py3-bottle","fixed_in":["0.12.21-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"py3-bottle","fixed_in":["0.12.21-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"python-bottle","fixed_in":["0.12.20-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"python-bottle","fixed_in":["0.12.20-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"python-bottle","fixed_in":["0.12.20-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"python-bottle","fixed_in":["0.12.13-1+deb9u2"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"python-bottle","fixed_in":["0.12.15-2+deb10u2"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"python-bottle","fixed_in":["0.12.19-1+deb11u1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"python-bottle","fixed_in":["0.12.20-1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"python-bottle","fixed_in":["0.12.13-9.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"python-bottle","fixed_in":["0.12.13-9.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"python-bottle","fixed_in":["0.12.13-10.oe2203"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"python-bottle","fixed_in":["0.12.13-150000.3.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python-bottle","fixed_in":["0.12.0-1ubuntu0.1~esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python-bottle","fixed_in":["0.12.7-1+deb8u1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"python-bottle","fixed_in":["0.12.13-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"python-bottle","fixed_in":["0.12.15-2.1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"python-bottle","fixed_in":["0.12.19-1+deb11u1build0.22.04.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.20"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"py3-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.21-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"py3-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.21-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"py3-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.21-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"py3-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.21-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"py3-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.21-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"py3-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.21-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"py3-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.21-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"py3-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.21-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"py3-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.21-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.20-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.20-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.20-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-1+deb9u2"}]}],"versions":["0.12.13-1","0.12.13-1+deb9u1"]},{"source":"osv","ecosystem":"Debian:10","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.15-2+deb10u2"}]}],"versions":["0.12.15-2","0.12.15-2+deb10u1"]},{"source":"osv","ecosystem":"Debian:11","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.19-1+deb11u1"}]}],"versions":["0.12.19-1"]},{"source":"osv","ecosystem":"PyPI","package":"bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.20"}]}],"versions":["0.10.1","0.10.10","0.10.11","0.10.12","0.10.2","0.10.3","0.10.4","0.10.5","0.10.6","0.10.7","0.10.8","0.10.9","0.11.1","0.11.2","0.11.3","0.11.4","0.11.5","0.11.6","0.11.7","0.12.1","0.12.10","0.12.11","0.12.12","0.12.13","0.12.14","0.12.15","0.12.16","0.12.17","0.12.18","0.12.19","0.12.2","0.12.3","0.12.4","0.12.5","0.12.6","0.12.7","0.12.8","0.12.9","0.4.10","0.4.11","0.4.12","0.4.13","0.4.14","0.4.3","0.4.4","0.4.6","0.4.7","0.4.8","0.4.9","0.5.3","0.5.4","0.5.6","0.5.7","0.5.8","0.6.0","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.6.6","0.8.1","0.8.2","0.8.3","0.8.4","0.8.5","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","0.9.7","0.9.8"]},{"source":"osv","ecosystem":"Mageia:8","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.20-1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-9.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-9.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-10.oe2203"}]}]},{"source":"osv","ecosystem":"PyPI","package":"bottle","ranges":[{"type":"GIT","events":[{"introduced":"0"},{"fixed":"e140e1b54da721a660f2eb9d58a106b7b3ff2f00"},{"fixed":"a2b0ee6bb4ce88895429ec4aca856616244c4c4c"}]},{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.20"}]}],"versions":["0.10.1","0.10.10","0.10.11","0.10.12","0.10.2","0.10.3","0.10.4","0.10.5","0.10.6","0.10.7","0.10.8","0.10.9","0.11.1","0.11.2","0.11.3","0.11.4","0.11.5","0.11.6","0.11.7","0.12.1","0.12.10","0.12.11","0.12.12","0.12.13","0.12.14","0.12.15","0.12.16","0.12.17","0.12.18","0.12.19","0.12.2","0.12.3","0.12.4","0.12.5","0.12.6","0.12.7","0.12.8","0.12.9","0.4.10","0.4.11","0.4.12","0.4.13","0.4.14","0.4.3","0.4.4","0.4.6","0.4.7","0.4.8","0.4.9","0.5.3","0.5.4","0.5.6","0.5.7","0.5.8","0.6.0","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.6.6","0.8.1","0.8.2","0.8.3","0.8.4","0.8.5","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","0.9.7","0.9.8"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.0-1ubuntu0.1~esm3"}]}],"versions":["0.11.6-1","0.12.0-1","0.12.0-1ubuntu0.1~esm1","0.12.0-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.7-1+deb8u1ubuntu0.1~esm1"}]}],"versions":["0.12.7-1","0.12.7-1+deb8u1build0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-1ubuntu0.2"}]}],"versions":["0.12.13-1","0.12.13-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.15-2.1ubuntu0.2"}]}],"versions":["0.12.15-2","0.12.15-2build1","0.12.15-2.1","0.12.15-2.1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.19-1+deb11u1build0.22.04.1"}]}],"versions":["0.12.19-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.13-1ubuntu0.2"}]}],"versions":["0.12.13-1","0.12.13-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.15-2.1ubuntu0.2"}]}],"versions":["0.12.15-2","0.12.15-2build1","0.12.15-2.1","0.12.15-2.1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.19-1+deb11u1build0.22.04.1"}]}],"versions":["0.12.19-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.0-1ubuntu0.1~esm3"}]}],"versions":["0.11.6-1","0.12.0-1","0.12.0-1ubuntu0.1~esm1","0.12.0-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python-bottle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.7-1+deb8u1ubuntu0.1~esm1"}]}],"versions":["0.12.7-1","0.12.7-1+deb8u1build0.16.04.1"]}],"products":[{"vendor":"bottlepy","product":"bottle"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"}],"references":[{"url":"https://github.com/bottlepy/bottle/commit/e140e1b54da721a660f2eb9d58a106b7b3ff2f00","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://github.com/bottlepy/bottle/commit/a2b0ee6bb4ce88895429ec4aca856616244c4c4c","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://github.com/bottlepy/bottle/compare/0.12.19...0.12.20","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/06/msg00010.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://www.debian.org/security/2022/dsa-5159","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE7U6J45PUEXIYYVWJKPM6QXIRKDK4HD/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KTLOQGMDZEPIYTFC2G53OQV2ULCGYS3F/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31799","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/bottle/PYSEC-2022-227.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-xhp9-4947-rq78","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IE7U6J45PUEXIYYVWJKPM6QXIRKDK4HD","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KTLOQGMDZEPIYTFC2G53OQV2ULCGYS3F","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-31799","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31799.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-31799","tags":["advisory"]},{"url":"https://github.com/bottlepy/bottle","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2022-0245.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30532","tags":["report"]},{"url":"https://www.debian.org/lts/security/2022/dla-3048","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/KTLOQGMDZEPIYTFC2G53OQV2ULCGYS3F/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1712","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IE7U6J45PUEXIYYVWJKPM6QXIRKDK4HD/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KTLOQGMDZEPIYTFC2G53OQV2ULCGYS3F/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223103-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1200286","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31799","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-31799","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5532-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-31799","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5532-2","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28473","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-31799","description":"Bottle before 0.12.20 mishandles errors during early request binding.","status":"published","published":"2022-05-29T21:25:44Z","modified":"2024-08-03T07:26:01.088Z","updated_at":"2026-11-02T14:34:35.279735Z"}],"euvd":[{"id":"EUVD-2022-0032","description":"Bottle before 0.12.20 mishandles errors during early request binding.","status":"published","published":"2022-05-29T21:25:44Z","modified":"2024-08-03T07:26:01Z","updated_at":"2026-11-03T03:25:33.60677Z"}],"ghsa":[{"id":"GHSA-xhp9-4947-rq78","title":"Denial of service in bottle","description":"Bottle before 0.12.20 mishandles errors during early request binding.","status":"published","published":"2022-06-03T00:01:15Z","modified":"2024-09-13T15:51:02Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T14:38:02.773864Z"}],"nvd":[{"id":"CVE-2022-31799","description":"Bottle before 0.12.20 mishandles errors during early request binding.","status":"published","published":"2022-06-02T14:15:58.213Z","modified":"2026-06-17T04:46:19.71Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T14:07:21.62951Z"}],"osv":[{"id":"ALPINE-CVE-2022-31799","description":"Bottle before 0.12.20 mishandles errors during early request binding.","status":"published","published":"2022-06-02T14:15:58.213Z","modified":"2026-11-03T07:31:17.287539011Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"DEBIAN-CVE-2022-31799","description":"Bottle before 0.12.20 mishandles errors during early request binding.","status":"published","published":"2022-06-02T14:15:58.213Z","modified":"2026-11-03T08:03:53.392468396Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T08:23:57.167851Z"},{"id":"GHSA-xhp9-4947-rq78","title":"Denial of service in bottle","description":"Bottle before 0.12.20 mishandles errors during early request binding.","status":"published","published":"2022-06-03T00:01:15Z","modified":"2025-02-16T05:40:17.593285Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T15:47:00.198893Z"},{"id":"OESA-2022-1712","title":"python-bottle security update","description":"Bottle is a fast, simple and lightweight WSGI micro web-framework for Python. It is distributed as a single file module and has no dependencies other than the Python Standard Library.\r\n\r\nSecurity Fix(es):\r\n\r\nBottle before 0.12.20 mishandles errors during early request binding.(CVE-2022-31799)","status":"published","published":"2022-06-17T11:04:59Z","modified":"2026-08-18T01:16:43.761932013Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2022-31799","description":"Bottle before 0.12.20 mishandles errors during early request binding.","status":"published","published":"2022-06-02T14:15:00Z","modified":"2026-02-04T02:56:36.510833Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:53.899276Z"},{"id":"CVE-2022-31799","description":"Bottle before 0.12.20 mishandles errors during early request binding.","status":"published","published":"2022-05-29T21:25:44Z","modified":"2026-10-28T02:30:29.682580454Z","updated_at":"2026-11-02T15:44:25.860945Z"},{"id":"DLA-3048-1","title":"python-bottle - security update","status":"published","published":"2022-06-09T00:00:00Z","modified":"2026-03-09T01:23:21.169074Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5159-1","title":"python-bottle - security update","status":"published","published":"2022-06-09T00:00:00Z","modified":"2026-03-09T02:09:07.392668Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0245","title":"Updated python-bottle packages fix security vulnerability","description":"Bottle before 0.12.20 mishandles errors during early request binding.\n(CVE-2022-31799)\n","status":"published","published":"2022-06-30T21:31:09Z","modified":"2026-04-16T04:44:38.409524596Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:13210-1","title":"python-bottle-doc-0.12.25-5.1 on GA media","description":"These are all security issues fixed in the python-bottle-doc-0.12.25-5.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:58:12.5981Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"PYSEC-2022-227","description":"Bottle before 0.12.20 mishandles errors during early request binding.","status":"published","published":"2022-06-02T14:15:00Z","modified":"2023-11-08T04:09:33.129718Z","updated_at":"2026-11-02T15:52:53.449407Z"},{"id":"SUSE-SU-2022:3103-1","title":"Security update for python-bottle","description":"This update for python-bottle fixes the following issues:\n\n- CVE-2022-31799: Fixed an error mishandling issue that could lead to\n  remote denial of service (bsc#1200286).\n","status":"published","published":"2022-09-06T08:31:26Z","modified":"2026-02-04T03:13:09.957324Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-5532-1","title":"python-bottle vulnerability","description":"It was discovered that Bottle incorrectly handled errors during early request \nbinding. An attacker could possibly use this issue to disclose sensitive \ninformation. (CVE-2022-31799)\n","status":"published","published":"2022-07-26T08:05:36Z","modified":"2026-02-10T04:42:42Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5532-2","title":"python-bottle vulnerability","description":"USN-5532-1 fixed a vulnerability in Bottle. This update provides the\ncorresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM\n\nOriginal advisory details:\n\n It was discovered that Bottle incorrectly handled errors during early request \n binding. An attacker could possibly use this issue to disclose sensitive \n information. (CVE-2022-31799)\n","status":"published","published":"2022-07-26T14:07:42Z","modified":"2026-06-29T13:49:40.043673218Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}