{"id":"CVE-2023-46136","aliases":["ALPINE-CVE-2023-46136","AZL-31701","AZL-35141","CLSA-2026-1773360968","CLSA-2026-1773360969","DEBIAN-CVE-2023-46136","EUVD-2023-0280","GHSA-hrfv-mqp8-q5rw","OESA-2025-1996","OESA-2025-1997","OESA-2025-1998","OESA-2025-1999","OESA-2025-2000","PYSEC-2023-221","RHSA-2023:7473","RHSA-2023:7477","RHSA-2023:7610","RHSA-2024:0189","RHSA-2024:0214","RHSA-2025:9775","ROOT-APP-PYPI-CVE-2023-46136","SUSE-SU-2023:4288-1","openSUSE-SU-2024:13375-1","openSUSE-SU-2026:11943-1"],"status":"published","title":"Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning","description":"Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8.","severity":{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01288,"percentile":0.70408,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-400","CWE-407","CWE-787"],"published":"2023-10-24T23:48:56Z","modified":"2026-11-03T06:32:43Z","exploits":[{"source":"pocgithub","id":"JawadPy/WerkGhost","title":"JawadPy/WerkGhost","date":"2025-11-29","url":"https://github.com/JawadPy/WerkGhost"}],"fixes":[{"ecosystem":"PyPI","package":"werkzeug","fixed_in":["3.0.1","2.3.8"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.18","package":"py3-werkzeug","fixed_in":["2.3.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"py3-werkzeug","fixed_in":["2.3.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"py3-werkzeug","fixed_in":["2.3.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"py3-werkzeug","fixed_in":["2.3.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"py3-werkzeug","fixed_in":["2.3.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"py3-werkzeug","fixed_in":["2.3.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"py3-werkzeug","fixed_in":["2.3.7-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"python-werkzeug","fixed_in":["2.3.7-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"python-werkzeug","fixed_in":["3.0.1-1"],"sources":["osv"]},{"ecosystem":"TuxCare:PyPI","package":"werkzeug","fixed_in":["1.0.1.post4+tuxcare","2.2.3.post4+tuxcare"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"python-werkzeug","fixed_in":["2.2.2-3+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"python-werkzeug","fixed_in":["3.0.1-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"python-werkzeug","fixed_in":["3.0.1-2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"python-werkzeug","fixed_in":["2.2.3-4.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"python-werkzeug","fixed_in":["2.2.3-4.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"python-werkzeug","fixed_in":["2.2.3-4.oe2403sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"python-werkzeug","fixed_in":["0:2.0.3-5.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"python3-werkzeug","fixed_in":["0:2.0.3-5.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el8","package":"python-werkzeug","fixed_in":["0:2.0.1-8.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el8","package":"python3-werkzeug","fixed_in":["0:2.0.1-8.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"python-werkzeug","fixed_in":["0:2.0.1-6.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-werkzeug","fixed_in":["0:2.0.1-6.el9ost"],"sources":["osv"]},{"ecosystem":"Root:PyPI","package":"Werkzeug","fixed_in":["2.3.7+aikido.6","2.2.3+aikido.3","2.2.3+aikido.4","2.2.3+aikido.5"],"sources":["osv"]},{"ecosystem":"Root:PyPI","package":"rootio-Werkzeug","fixed_in":["2.3.7+root.io.4","2.3.7+root.io.5","2.2.3+root.io.2","2.3.7+root.io.6","2.2.3+root.io.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP4","package":"python-Werkzeug","fixed_in":["2.3.6-150400.6.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP5","package":"python-Werkzeug","fixed_in":["2.3.6-150400.6.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"python-Werkzeug","fixed_in":["2.3.6-150400.6.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"python-Werkzeug","fixed_in":["2.3.6-150400.6.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"python-Werkzeug","fixed_in":["3.0.1-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.1"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0rc1"},{"fixed":"2.3.8"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"py3-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"py3-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"py3-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"py3-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"py3-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"py3-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"py3-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-1"}]}]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.1"},{"fixed":"1.0.1.post4+tuxcare"}]}],"versions":["1.0.1","1.0.1.post1+tuxcare","1.0.1.post2+tuxcare","1.0.1.post3+tuxcare"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.3"},{"fixed":"2.2.3.post4+tuxcare"}]}],"versions":["2.2.3","2.2.3.post1+tuxcare","2.2.3.post3+tuxcare"]},{"source":"osv","ecosystem":"Debian:12","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-3+deb12u1"}]}],"versions":["2.2.2-3"]},{"source":"osv","ecosystem":"Debian:13","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-2"}]}]},{"source":"osv","ecosystem":"PyPI","package":"werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.1"}]}],"versions":["3.0.0"]},{"source":"osv","ecosystem":"PyPI","package":"werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0rc1"},{"fixed":"2.3.8"}]}],"versions":["2.0.0","2.0.0rc1","2.0.0rc2","2.0.0rc3","2.0.0rc4","2.0.0rc5","2.0.1","2.0.2","2.0.3","2.1.0","2.1.1","2.1.2","2.2.0","2.2.0a1","2.2.1","2.2.2","2.2.3","2.3.0","2.3.1","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.3-4.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-6.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-6.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.3-4.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.3-4.oe2403sp1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"werkzeug","ranges":[{"type":"GIT","events":[{"introduced":"0"},{"fixed":"f3c803b3ade485a45f12b6d6617595350c0f03e2"},{"fixed":"f2300208d5e2a5076cbbb4c2aad71096fd040ef9"}]},{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8"},{"introduced":"3.0.0"},{"fixed":"3.0.1"}]}],"versions":["0.1","0.10","0.10.1","0.10.2","0.10.3","0.10.4","0.11","0.11.1","0.11.10","0.11.11","0.11.12","0.11.13","0.11.14","0.11.15","0.11.2","0.11.3","0.11.4","0.11.5","0.11.6","0.11.7","0.11.8","0.11.9","0.12","0.12.1","0.12.2","0.13","0.14","0.14.1","0.15.0","0.15.1","0.15.2","0.15.3","0.15.4","0.15.5","0.15.6","0.16.0","0.16.1","0.2","0.3","0.3.1","0.4","0.4.1","0.5","0.5.1","0.6","0.6.1","0.6.2","0.7","0.7.1","0.7.2","0.8","0.8.1","0.8.2","0.8.3","0.9","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","1.0.0","1.0.0rc1","1.0.1","2.0.0","2.0.0rc1","2.0.0rc2","2.0.0rc3","2.0.0rc4","2.0.0rc5","2.0.1","2.0.2","2.0.3","2.1.0","2.1.1","2.1.2","2.2.0","2.2.0a1","2.2.1","2.2.2","2.2.3","2.3.0","2.3.1","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","3.0.0"]},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.14::el9","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-2.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.14::el9","package":"python3-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-2.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.13-2.rhaos4.14.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"haproxy-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.13-2.rhaos4.14.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"haproxy26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.13-2.rhaos4.14.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.14::el8","package":"haproxy26-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.13-2.rhaos4.14.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-5.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"python3-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-5.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.5-2.rhaos4.12.git0217273.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.5-2.rhaos4.12.git0217273.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.5-2.rhaos4.12.git0217273.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-debug-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-debuginfo-common-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-ipaclones-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.rt7.241.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-rt-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.rt7.241.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.rt7.241.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-rt-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.rt7.241.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.rt7.241.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.rt7.241.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-rt-debug-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.rt7.241.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-rt-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.rt7.241.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-rt-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.rt7.241.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-rt-debug-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.rt7.241.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.rt7.241.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.rt7.241.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.rt7.241.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-rt-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.rt7.241.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-rt-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.rt7.241.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-rt-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.rt7.241.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-rt-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.rt7.241.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-rt-selftests-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.rt7.241.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-selftests-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-zfcpdump-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-zfcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-zfcpdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-zfcpdump-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-zfcpdump-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"kernel-zfcpdump-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-202311161331.p0.ga52e8df.assembly.stream.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-202311221849.p0.gd2ac7e1.assembly.stream.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-202311221849.p0.gd2ac7e1.assembly.stream.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-202311161331.p0.ga52e8df.assembly.stream.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"python3-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-372.82.1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-202311161331.p0.ga52e8df.assembly.stream.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-202311221849.p0.gd2ac7e1.assembly.stream.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-202311221849.p0.gd2ac7e1.assembly.stream.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-202311161331.p0.ga52e8df.assembly.stream.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.12::el9","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-5.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.12::el9","package":"python3-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-5.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el8","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-8.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el8","package":"python3-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-8.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-6.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-6.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-exporter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-immutable-object-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-immutable-object-cache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-mib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-mon-client-nvmeof-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"cephadm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"cephadm-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.4-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"cephfs-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"cephfs-top","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephfs-daemon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephfs-proxy2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephfs-proxy2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephsqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"liboath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"liboath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libpskc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"oath-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"oath-toolkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"oath-toolkit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"oathtool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"pam_oath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"pskctool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-222.el9cp"}]}],"bundled":8},{"source":"osv","ecosystem":"Root:PyPI","package":"Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7+aikido.6"},{"fixed":"2.2.3+aikido.3"},{"fixed":"2.2.3+aikido.4"},{"fixed":"2.2.3+aikido.5"}]}]},{"source":"osv","ecosystem":"Root:PyPI","package":"rootio-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7+root.io.4"},{"fixed":"2.3.7+root.io.5"},{"fixed":"2.2.3+root.io.2"},{"fixed":"2.3.7+root.io.6"},{"fixed":"2.2.3+root.io.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP4","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6-150400.6.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP5","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6-150400.6.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6-150400.6.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6-150400.6.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.9-1.1"}]}],"bundled":6}],"products":[{"vendor":"pallets","product":"werkzeug"},{"vendor":"palletsprojects","product":"werkzeug"}],"references":[{"url":"https://github.com/pallets/werkzeug/security/advisories/GHSA-hrfv-mqp8-q5rw","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","article"]},{"url":"https://github.com/pallets/werkzeug/commit/f3c803b3ade485a45f12b6d6617595350c0f03e2","tags":["x_refsource_MISC","x_transferred","Patch","fix","web","article"]},{"url":"https://security.netapp.com/advisory/ntap-20231124-0008/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/pallets/werkzeug/commit/b1916c0c083e0be1c9d887ee2f3d696922bfc5c1","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46136","tags":["web","advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/werkzeug/PYSEC-2023-221.yaml","tags":["web"]},{"url":"https://github.com/pallets/werkzeug/commit/f2300208d5e2a5076cbbb4c2aad71096fd040ef9","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20231124-0008","tags":["web"]},{"url":"https://github.com/pallets/werkzeug/commit/cbb446fdcada7685fce936ded01b76c08dbd6eb5","tags":["web"]},{"url":"https://github.com/advisories/GHSA-hrfv-mqp8-q5rw"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-46136","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46136.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-46136","tags":["advisory"]},{"url":"https://github.com/pallets/werkzeug","tags":["package"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1996","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1997","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34069","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1998","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1999","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2000","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7473","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170242","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2246310","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7473.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25577","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25577","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25577","tags":["advisory"]},{"url":"https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1","tags":["article"]},{"url":"https://github.com/pallets/werkzeug/releases/tag/2.2.3","tags":["article"]},{"url":"https://github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40225","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40225","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40225","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46136","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-46136","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7477","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7477.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7610","tags":["advisory"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2023-003","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242803","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243296","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7610.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39325","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39325","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39325","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-44487","tags":["report"]},{"url":"https://go.dev/issue/63417","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2023-2102","tags":["advisory"]},{"url":"https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-44487","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44487","tags":["advisory"]},{"url":"https://github.com/dotnet/announcements/issues/277","tags":["article"]},{"url":"https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0189","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0189.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0214","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0214.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9775","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2016889","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2047153","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2089305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097853","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2110983","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2121519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124175","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129325","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2134003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135354","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2146728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180089","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237854","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241321","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2250826","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251887","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253832","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2277697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2279578","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2279814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2282092","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2282276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2282369","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2282997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2291163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2292251","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2292668","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2292787","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2293659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2293847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2294000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2294691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2295310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2297166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2298532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2299776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2299777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2301434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2303640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2304314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2304317","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2305658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2307146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2308344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2308641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2308647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2308662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2309701","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2310433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2310527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2310528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2312578","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2312931","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2313279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2313407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2313513","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314716","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314855","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314995","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2315072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2315401","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2315602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2315603","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2316488","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2316598","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2316975","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2317153","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2317528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2317735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2317777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2317785","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2317969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2319125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2319199","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2319356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2320860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2321108","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2321568","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2321765","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2322398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2322664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2322677","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2323290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2323601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2323836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2323837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2324227","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2325383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2325397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2325408","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2326425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2327267","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2327311","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2327402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2327774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2328008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2329523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2330146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2330769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2330898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2330954","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2331411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2331703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2331781","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2331790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2332349","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2335768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2336352","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2336503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2336863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2336885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2338097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2338119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2338126","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2338149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2338402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2338406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339092","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2341711","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2341761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2342208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2342244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2342747","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2342752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2342827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2342909","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2342928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2343149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2343732","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2343918","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2343953","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2343968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2343980","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344352","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344746","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344993","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345267","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345488","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2346615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2346769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2346829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2346896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2348395","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2348670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2349010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2349077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350227","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350578","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350580","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350592","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351161","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351292","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351558","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2352427","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2352499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2352525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2352534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2352585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2352840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2352898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2353013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2353171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2353172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2353305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354192","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354475","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354498","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354529","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355683","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356678","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356850","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357179","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357450","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357464","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357488","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358807","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358816","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359062","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359508","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359556","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359598","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359678","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359716","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2360152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2360666","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2361465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2361701","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2361737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2361747","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2361817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2361828","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2361872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2362278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2362289","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2362859","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2362899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2363085","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2363086","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2363635","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2364290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2364715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2365098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2365146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2365154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2365869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2365926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366823","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2367319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2367419","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2367433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2367444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2367723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2368271","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2368715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369129","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2370002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372523","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9775.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23491","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23491","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23491","tags":["advisory"]},{"url":"https://github.com/certifi/python-certifi/security/advisories/GHSA-43fp-rhv2-5gv8","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-23934","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-23934","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23934","tags":["advisory"]},{"url":"https://github.com/pallets/werkzeug/commit/cf275f42acad1b5950c50ffe8ef58fe62cdce028","tags":["article"]},{"url":"https://github.com/pallets/werkzeug/security/advisories/GHSA-px8h-6qxv-m22q","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46159","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-46159","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46159","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-41184","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-41184","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-41184","tags":["advisory"]},{"url":"https://github.com/acassen/keepalived/issues/2447#issuecomment-2231329734","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-42353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2305004","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-42353","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-42353","tags":["advisory"]},{"url":"https://github.com/Pylons/webob","tags":["article"]},{"url":"https://github.com/Pylons/webob/commit/f689bcf4f0a1f64f1735b1d5069aef5be6974b5b","tags":["article"]},{"url":"https://github.com/Pylons/webob/security/advisories/GHSA-mg3v-6m49-jhp3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-47191","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47191","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234288-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1216581","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-46136","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-34069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-102598","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-46136","title":"Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning","description":"Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8.","status":"published","published":"2023-10-24T23:48:56.96Z","modified":"2026-05-20T22:17:43.259Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-407","CWE-400"],"updated_at":"2026-11-02T14:35:23.309349Z"}],"euvd":[{"id":"EUVD-2023-0280","description":"Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8.","status":"published","published":"2023-10-24T23:48:56Z","modified":"2026-05-20T22:17:43Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:21:13.845677Z"}],"ghsa":[{"id":"GHSA-hrfv-mqp8-q5rw","title":"Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning","description":"Werkzeug multipart data parser needs to find a boundary that may be between consecutive chunks. That's why parsing is based on looking for newline characters. Unfortunately, code looking for partial boundary in the buffer is written inefficiently, so if we upload a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer.\n\nThis allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. The amount of RAM required can trigger an out of memory kill of the process. If many concurrent requests are sent continuously, this can exhaust or kill all available workers.","status":"published","published":"2023-10-25T14:22:59Z","modified":"2026-05-20T22:16:53Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400","CWE-787"],"updated_at":"2026-11-02T14:40:13.628377Z"}],"nvd":[{"id":"CVE-2023-46136","description":"Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8.","status":"published","published":"2023-10-25T18:17:36.753Z","modified":"2026-06-17T06:30:13.7Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-400","CWE-407","CWE-787"],"updated_at":"2026-11-02T14:08:40.004465Z"}],"osv":[{"id":"ALPINE-CVE-2023-46136","description":"Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8.","status":"published","published":"2023-10-25T18:17:36.753Z","modified":"2026-11-03T06:32:43.674862485Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:02.90744Z"},{"id":"AZL-31701","title":"CVE-2023-46136 affecting package python-werkzeug for versions less than 2.3.7-1","description":"Werkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1.","status":"published","published":"2023-10-25T18:17:36Z","modified":"2026-04-21T04:26:28.386531Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-35141","title":"CVE-2023-46136 affecting package python-werkzeug for versions less than 3.0.1-1","description":"Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8.","status":"published","published":"2023-10-25T18:17:36Z","modified":"2026-08-28T17:45:41.8153713Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"CVE-2023-46136","title":"Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning","description":"Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8.","status":"published","published":"2023-10-24T23:48:56.96Z","modified":"2026-10-28T02:31:10.347069178Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-400","CWE-407"],"updated_at":"2026-11-02T15:44:34.287121Z"},{"id":"DEBIAN-CVE-2023-46136","description":"Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8.","status":"published","published":"2023-10-25T18:17:36.753Z","modified":"2026-10-26T18:01:54.576912773Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"GHSA-hrfv-mqp8-q5rw","title":"Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning","description":"Werkzeug multipart data parser needs to find a boundary that may be between consecutive chunks. That's why parsing is based on looking for newline characters. Unfortunately, code looking for partial boundary in the buffer is written inefficiently, so if we upload a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer.\n\nThis allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. The amount of RAM required can trigger an out of memory kill of the process. If many concurrent requests are sent continuously, this can exhaust or kill all available workers.","status":"published","published":"2023-10-25T14:22:59Z","modified":"2026-09-10T03:50:03.79959971Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400","CWE-787"],"updated_at":"2026-11-02T15:46:49.621585Z"},{"id":"OESA-2025-1996","title":"python-werkzeug security update","description":"A comprehensive WSGI web application library\r\n\r\nSecurity Fix(es):\n\nWerkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1.(CVE-2023-46136)","status":"published","published":"2025-08-15T11:09:04Z","modified":"2026-08-18T01:18:57.106787303Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1997","title":"python-werkzeug security update","description":"A comprehensive WSGI web application library\r\n\r\nSecurity Fix(es):\n\nWerkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1.(CVE-2023-46136)\n\nWerkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer\u0026apos;s machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer\u0026apos;s application that will trigger the debugger. This vulnerability is fixed in 3.0.3.(CVE-2024-34069)","status":"published","published":"2025-08-15T11:09:04Z","modified":"2026-08-18T01:18:57.157106645Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1998","title":"python-werkzeug security update","description":"A comprehensive WSGI web application library\r\n\r\nSecurity Fix(es):\n\nWerkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1.(CVE-2023-46136)\n\nWerkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer\u0026apos;s machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer\u0026apos;s application that will trigger the debugger. This vulnerability is fixed in 3.0.3.(CVE-2024-34069)","status":"published","published":"2025-08-15T11:09:05Z","modified":"2026-08-18T01:18:57.180453607Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1999","title":"python-werkzeug security update","description":"A comprehensive WSGI web application library\r\n\r\nSecurity Fix(es):\n\nWerkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1.(CVE-2023-46136)","status":"published","published":"2025-08-15T11:09:05Z","modified":"2026-08-18T01:18:02.984967011Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-2000","title":"python-werkzeug security update","description":"A comprehensive WSGI web application library\r\n\r\nSecurity Fix(es):\n\nWerkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1.(CVE-2023-46136)","status":"published","published":"2025-08-15T11:09:05Z","modified":"2026-08-18T01:18:02.925883934Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"PYSEC-2023-221","description":"Werkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1.","status":"published","published":"2023-10-25T18:17:00Z","modified":"2023-11-08T18:38:34.170214Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:53.837392Z"},{"id":"RHSA-2023:7473","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.4 packages and security update","status":"published","published":"2024-09-18T05:13:30Z","modified":"2026-08-19T10:02:52Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2023:7477","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.24 packages and security update","status":"published","published":"2024-09-18T05:12:53Z","modified":"2026-08-19T10:02:52Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2023:7610","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.45 packages and security update","status":"published","published":"2024-09-30T11:10:00Z","modified":"2026-10-20T10:02:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0189","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-werkzeug) security update","status":"published","published":"2024-09-18T05:15:36Z","modified":"2026-08-19T10:03:07Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0214","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-werkzeug) security update","status":"published","published":"2024-09-18T05:15:51Z","modified":"2026-08-19T10:03:08Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2025:9775","title":"Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security, bug fix, and enhancement updates","status":"published","published":"2025-06-27T10:05:48Z","modified":"2026-10-16T10:09:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"ROOT-APP-PYPI-CVE-2023-46136","title":"CVE-2023-46136 in Werkzeug - Patched by Root","description":"Root has patched CVE-2023-46136 in the Werkzeug package for Root:PyPI. Multiple fixed versions available.","status":"published","published":"2026-08-05T15:55:52Z","modified":"2026-08-05T16:45:10.547721423Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:27.940619Z"},{"id":"CLSA-2026-1773360968","title":"TuxCare security update for werkzeug (1 CVE)","description":"TuxCare rebuilt werkzeug to address 1 CVE. Fixed in 1.0.1.post4+tuxcare.","status":"published","published":"2026-08-04T14:52:12Z","modified":"2026-10-15T09:48:05.036948601Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"CLSA-2026-1773360969","title":"TuxCare security update for werkzeug (1 CVE)","description":"TuxCare rebuilt werkzeug to address 1 CVE. Fixed in 2.2.3.post4+tuxcare.","status":"published","published":"2026-08-04T14:52:12Z","modified":"2026-10-15T09:48:04.968756051Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"openSUSE-SU-2024:13375-1","title":"python310-Werkzeug-3.0.1-1.1 on GA media","description":"These are all security issues fixed in the python310-Werkzeug-3.0.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:36:10.999482Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2026:11943-1","title":"python313-Werkzeug-3.1.9-1.1 on GA media","description":"These are all security issues fixed in the python313-Werkzeug-3.1.9-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-01T00:00:00Z","modified":"2026-10-02T18:23:12.906515335Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"SUSE-SU-2023:4288-1","title":"Security update for python-Werkzeug","description":"This update for python-Werkzeug fixes the following issues:\n\n- CVE-2023-46136: Fixed a potential denial of service via large\n  multipart file uploads (bsc#1216581).\n","status":"published","published":"2023-10-31T08:08:07Z","modified":"2026-02-04T02:29:53.525512Z","updated_at":"2026-11-02T15:53:53.865042Z"}]}}
