{"id":"CVE-2024-34069","aliases":["AIKIDO-2024-10085","AZL-40372","AZL-40466","CLSA-2026-1772410264","CLSA-2026-1772410380","CLSA-2026-1782176240","CLSA-2026-1789452814","CLSA-2026-1791187847","DEBIAN-CVE-2024-34069","DLA-4062-1","EUVD-2024-1358","GHSA-2g68-c3qc-8985","MGASA-2024-0234","OESA-2025-1997","OESA-2025-1998","OESA-2025-2060","PYSEC-2026-2043","RHSA-2024:10696","RHSA-2024:5810","RHSA-2024:6016","RHSA-2024:9975","RHSA-2024:9976","RHSA-2025:4664","SUSE-SU-2024:1572-1","SUSE-SU-2024:1591-1","SUSE-SU-2024:1591-2","SUSE-SU-2024:1608-1","SUSE-SU-2024:1624-1","SUSE-SU-2024:1624-2","UBUNTU-CVE-2024-34069","USN-6799-1","openSUSE-SU-2024:14042-1","openSUSE-SU-2026:11943-1"],"status":"published","title":"Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution","description":"Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.03397,"percentile":0.88921,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-352"],"published":"2024-05-06T14:21:27Z","modified":"2026-11-02T12:02:25Z","exploits":[{"source":"metasploit","id":"exploit/multi/http/werkzeug_debug_rce","title":"Pallete Projects Werkzeug Debugger Remote Code Execution","type":"exploit","platform":"Python","date":"2015-06-28","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/multi/http/werkzeug_debug_rce"}],"fixes":[{"ecosystem":"PyPI","package":"werkzeug","fixed_in":["3.0.3"],"sources":["ghsa","osv"]},{"ecosystem":"Azure Linux:3","package":"python-werkzeug","fixed_in":["3.0.3-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"python-werkzeug","fixed_in":["2.3.7-2"],"sources":["osv"]},{"ecosystem":"TuxCare:PyPI","package":"werkzeug","fixed_in":["1.0.1.post2+tuxcare","2.2.3.post1+tuxcare","2.3.8.post2+tuxcare"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"python-werkzeug","fixed_in":["2.2.2-3+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"python-werkzeug","fixed_in":["3.0.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"python-werkzeug","fixed_in":["3.0.3-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"python-werkzeug","fixed_in":["1.0.1+dfsg1-2+deb11u2"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"python-werkzeug","fixed_in":["3.0.3-1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"python-werkzeug","fixed_in":["1.0.1-3.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"python-werkzeug","fixed_in":["0:0.14.1-13.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-werkzeug","fixed_in":["0:0.14.1-13.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift_ironic:4.15::el9","package":"python-werkzeug","fixed_in":["0:2.2.3-3.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift_ironic:4.15::el9","package":"python3-werkzeug","fixed_in":["0:2.2.3-3.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el8","package":"python-werkzeug","fixed_in":["0:2.0.1-9.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el8","package":"python3-werkzeug","fixed_in":["0:2.0.1-9.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"python-werkzeug","fixed_in":["0:2.0.1-7.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-werkzeug","fixed_in":["0:2.0.1-7.el9ost"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"python-Werkzeug","fixed_in":["0.12.2-10.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP5","package":"python-Werkzeug","fixed_in":["2.3.6-150400.6.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python-Werkzeug","fixed_in":["2.3.6-150400.6.9.1","1.0.1-150300.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python-Werkzeug","fixed_in":["2.3.6-150400.6.9.1","1.0.1-150300.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python-Werkzeug","fixed_in":["2.3.6-150400.6.9.1","1.0.1-150300.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python-Werkzeug","fixed_in":["2.3.6-150400.6.9.1","1.0.1-150300.3.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"python-Werkzeug","fixed_in":["2.3.6-150400.6.9.1","1.0.1-150300.3.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"python-Werkzeug","fixed_in":["2.3.6-150400.6.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP6","package":"python-Werkzeug","fixed_in":["2.3.6-150400.6.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-Werkzeug","fixed_in":["0.14.1-150100.6.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-Werkzeug","fixed_in":["0.14.1-150100.6.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-Werkzeug","fixed_in":["0.14.1-150100.6.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"python-Werkzeug-doc","fixed_in":["0.14.1-150100.6.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"python-Werkzeug-doc","fixed_in":["0.14.1-150100.6.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"python-Werkzeug","fixed_in":["1.0.1-150300.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"python-Werkzeug","fixed_in":["1.0.1-150300.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-Werkzeug","fixed_in":["1.0.1-150300.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-Werkzeug","fixed_in":["1.0.1-150300.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-Werkzeug","fixed_in":["1.0.1-150300.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"python-Werkzeug","fixed_in":["1.0.1-150300.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"python-Werkzeug","fixed_in":["1.0.1-150300.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-Werkzeug","fixed_in":["1.0.1-150300.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"python-Werkzeug","fixed_in":["1.0.1-150300.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"python-Werkzeug","fixed_in":["1.0.1-150300.3.8.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python-werkzeug","fixed_in":["0.10.4+dfsg1-1ubuntu1.2+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python-werkzeug","fixed_in":["0.14.1+dfsg1-1ubuntu0.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"python-werkzeug","fixed_in":["0.16.1+dfsg1-2ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"python-werkzeug","fixed_in":["2.0.2+dfsg1-1ubuntu0.22.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"python-werkzeug","fixed_in":["3.0.1-3ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.7-2"}]}]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.1"},{"fixed":"1.0.1.post2+tuxcare"}]}],"versions":["1.0.1","1.0.1.post1+tuxcare"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.3"},{"fixed":"2.2.3.post1+tuxcare"}]}],"versions":["2.2.3"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.8"},{"fixed":"2.3.8.post2+tuxcare"}]}],"versions":["2.3.8","2.3.8.post1+tuxcare"]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.3"},{"fixed":"2.2.3.post5+tuxcare"}]}],"versions":["2.2.3","2.2.3.post1+tuxcare","2.2.3.post3+tuxcare","2.2.3.post4+tuxcare"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.16.1"},{"fixed":"0.16.1.post1+tuxcare"}]}],"versions":["0.16.1"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-3+deb12u1"}]}],"versions":["2.2.2-3"]},{"source":"osv","ecosystem":"Debian:13","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+dfsg1-2+deb11u2"}]}],"versions":["1.0.1+dfsg1-2","1.0.1+dfsg1-2+deb11u1"]},{"source":"osv","ecosystem":"PyPI","package":"werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3"}]}],"versions":["0.1","0.10","0.10.1","0.10.2","0.10.3","0.10.4","0.11","0.11.1","0.11.10","0.11.11","0.11.12","0.11.13","0.11.14","0.11.15","0.11.2","0.11.3","0.11.4","0.11.5","0.11.6","0.11.7","0.11.8","0.11.9","0.12","0.12.1","0.12.2","0.13","0.14","0.14.1","0.15.0","0.15.1","0.15.2","0.15.3","0.15.4","0.15.5","0.15.6","0.16.0","0.16.1","0.2","0.3","0.3.1","0.4","0.4.1","0.5","0.5.1","0.6","0.6.1","0.6.2","0.7","0.7.1","0.7.2","0.8","0.8.1","0.8.2","0.8.3","0.9","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","1.0.0","1.0.0rc1","1.0.1","2.0.0","2.0.0rc1","2.0.0rc2","2.0.0rc3","2.0.0rc4","2.0.0rc5","2.0.1","2.0.2","2.0.3","2.1.0","2.1.1","2.1.2","2.2.0","2.2.0a1","2.2.1","2.2.2","2.2.3","2.3.0","2.3.1","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","3.0.0","3.0.1","3.0.2"]},{"source":"osv","ecosystem":"Mageia:9","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-6.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-6.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-3.oe2003sp4"}]}]},{"source":"osv","ecosystem":"PyPI","package":"werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3"}]}],"versions":["0.1","0.10","0.10.1","0.10.2","0.10.3","0.10.4","0.11","0.11.1","0.11.10","0.11.11","0.11.12","0.11.13","0.11.14","0.11.15","0.11.2","0.11.3","0.11.4","0.11.5","0.11.6","0.11.7","0.11.8","0.11.9","0.12","0.12.1","0.12.2","0.13","0.14","0.14.1","0.15.0","0.15.1","0.15.2","0.15.3","0.15.4","0.15.5","0.15.6","0.16.0","0.16.1","0.2","0.3","0.3.1","0.4","0.4.1","0.5","0.5.1","0.6","0.6.1","0.6.2","0.7","0.7.1","0.7.2","0.8","0.8.1","0.8.2","0.8.3","0.9","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","1.0.0","1.0.0rc1","1.0.1","2.0.0","2.0.0rc1","2.0.0rc2","2.0.0rc3","2.0.0rc4","2.0.0rc5","2.0.1","2.0.2","2.0.3","2.1.0","2.1.1","2.1.2","2.2.0","2.2.0a1","2.2.1","2.2.2","2.2.3","2.3.0","2.3.1","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","3.0.0","3.0.1","3.0.2"]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.1-13.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.1-13.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-202408131833.p0.g1eb8682.assembly.stream.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-202408131833.p0.g1eb8682.assembly.stream.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-202408131833.p0.g1eb8682.assembly.stream.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-202408131833.p0.g1eb8682.assembly.stream.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.12::el9","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-3.el9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.12::el9","package":"python3-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-3.el9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.12::el9","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-6.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.12::el9","package":"python3-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-6.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.15::el9","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-3.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.15::el9","package":"python3-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-3.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el8","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-9.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el8","package":"python3-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-9.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-7.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"python3-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-7.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"liboath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"liboath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libpskc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"oath-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"oath-toolkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"oath-toolkit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"oathtool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"pam_oath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"pskctool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"liboath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"liboath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libpskc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"oath-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"oath-toolkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"oath-toolkit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"oathtool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"pam_oath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"pskctool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.12-1.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-exporter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-immutable-object-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-immutable-object-cache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-mib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"cephfs-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"cephfs-top","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libcephsqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el8cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-exporter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-immutable-object-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-immutable-object-cache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mon-client-nvmeof-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"cephadm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"cephfs-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"cephfs-top","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libcephsqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-329.el9cp"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.2-10.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP5","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6-150400.6.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6-150400.6.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6-150400.6.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6-150400.6.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6-150400.6.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6-150400.6.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6-150400.6.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP6","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.6-150400.6.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-150100.6.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-150100.6.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-150100.6.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-Werkzeug-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-150100.6.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python-Werkzeug-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1-150100.6.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-150300.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-150300.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-150300.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-150300.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-150300.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-150300.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-150300.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-150300.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-150300.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-150300.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-150300.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-150300.3.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-150300.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-150300.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-150300.3.8.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4+dfsg1-1ubuntu1.2+esm2"}]}],"versions":["0.10.4+dfsg1-1ubuntu1","0.10.4+dfsg1-1ubuntu1.1","0.10.4+dfsg1-1ubuntu1.2","0.10.4+dfsg1-1ubuntu1.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1+dfsg1-1ubuntu0.2+esm1"}]}],"versions":["0.12.2+dfsg1-2","0.13+dfsg1-1","0.14.1+dfsg1-1","0.14.1+dfsg1-1ubuntu0.1","0.14.1+dfsg1-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.1+dfsg1-2ubuntu0.2"}]}],"versions":["0.14.1+dfsg1-4","0.15.6+dfsg1-1","0.16.0+dfsg1-1","0.16.1+dfsg1-1ubuntu1","0.16.1+dfsg1-2","0.16.1+dfsg1-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2+dfsg1-1ubuntu0.22.04.2"}]}],"versions":["1.0.1+dfsg1-2","2.0.2+dfsg1-1","2.0.2+dfsg1-1ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-3ubuntu0.1"}]}],"versions":["2.2.2-3","3.0.1-1","3.0.1-2","3.0.1-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4+dfsg1-1ubuntu1.2+esm2"}]}],"versions":["0.10.4+dfsg1-1ubuntu1","0.10.4+dfsg1-1ubuntu1.1","0.10.4+dfsg1-1ubuntu1.2","0.10.4+dfsg1-1ubuntu1.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.1+dfsg1-1ubuntu0.2+esm1"}]}],"versions":["0.12.2+dfsg1-2","0.13+dfsg1-1","0.14.1+dfsg1-1","0.14.1+dfsg1-1ubuntu0.1","0.14.1+dfsg1-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.1+dfsg1-2ubuntu0.2"}]}],"versions":["0.14.1+dfsg1-4","0.15.6+dfsg1-1","0.16.0+dfsg1-1","0.16.1+dfsg1-1ubuntu1","0.16.1+dfsg1-2","0.16.1+dfsg1-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2+dfsg1-1ubuntu0.22.04.2"}]}],"versions":["1.0.1+dfsg1-2","2.0.2+dfsg1-1","2.0.2+dfsg1-1ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-3ubuntu0.1"}]}],"versions":["2.2.2-3","3.0.1-1","3.0.1-2","3.0.1-3"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-Werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.9-1.1"}]}],"bundled":6}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"pallets","product":"werkzeug"},{"vendor":"palletsprojects","product":"werkzeug"}],"references":[{"url":"https://github.com/pallets/werkzeug/security/advisories/GHSA-2g68-c3qc-8985","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","article","report"]},{"url":"https://github.com/pallets/werkzeug/commit/3386395b24c7371db11a5b8eaac0c91da5362692","tags":["x_refsource_MISC","x_transferred","Patch","fix","web","article","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HFERFN7PINV4MOGMGA3DPIXJPDCYOEJZ/","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H4SH32AM3CTPMAAEOIDAN7VU565LO4IR/","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20240614-0004/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/02/msg00026.html","tags":["Mailing List","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34069","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H4SH32AM3CTPMAAEOIDAN7VU565LO4IR","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HFERFN7PINV4MOGMGA3DPIXJPDCYOEJZ","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20240614-0004","tags":["web"]},{"url":"https://github.com/advisories/GHSA-2g68-c3qc-8985","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/34xxx/CVE-2024-34069.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-34069","tags":["advisory"]},{"url":"https://github.com/pallets/werkzeug","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2024-0234.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33201","tags":["report"]},{"url":"https://lwn.net/Articles/973069/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-6799-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1997","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46136","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1998","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2060","tags":["advisory"]},{"url":"https://pypi.org/project/werkzeug","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2024:10696","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2279451","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10696.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-34069","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-34069","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:5810","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268017","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5810.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45290","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45290","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45290","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/08/4","tags":["article"]},{"url":"https://go.dev/cl/569341","tags":["article"]},{"url":"https://go.dev/issue/65383","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2024-2599","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240329-0004","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-34064","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2279476","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-34064","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34064","tags":["advisory"]},{"url":"https://github.com/pallets/jinja/security/advisories/GHSA-h75v-3vvj-5mfj","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:6016","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6016.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9975","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9975.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9976","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9976.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4664","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270948","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2284356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2312113","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2315596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2315885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2321291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2348763","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2348935","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2348945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2348968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2348970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2349078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2349723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351271","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2352965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357889","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2360911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2362258","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4664.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-23934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170243","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-23934","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23934","tags":["advisory"]},{"url":"https://github.com/pallets/werkzeug/commit/cf275f42acad1b5950c50ffe8ef58fe62cdce028","tags":["article"]},{"url":"https://github.com/pallets/werkzeug/releases/tag/2.2.3","tags":["article"]},{"url":"https://github.com/pallets/werkzeug/security/advisories/GHSA-px8h-6qxv-m22q","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170242","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25577","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25577","tags":["advisory"]},{"url":"https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1","tags":["article"]},{"url":"https://github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2250329","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-46446","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46446","tags":["advisory"]},{"url":"https://github.com/ronf/asyncssh/security/advisories/GHSA-c35q-ffpf-5qpm","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-48795","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254210","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-48795","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-48795","tags":["advisory"]},{"url":"https://access.redhat.com/solutions/7071748","tags":["article"]},{"url":"https://terrapin-attack.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-24790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2292787","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-24790","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24790","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-42353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2305004","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-42353","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-42353","tags":["advisory"]},{"url":"https://github.com/Pylons/webob","tags":["article"]},{"url":"https://github.com/Pylons/webob/commit/f689bcf4f0a1f64f1735b1d5069aef5be6974b5b","tags":["article"]},{"url":"https://github.com/Pylons/webob/security/advisories/GHSA-mg3v-6m49-jhp3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-47191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2316488","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47191","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-48916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2329846","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-48916","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-48916","tags":["advisory"]},{"url":"https://github.com/ceph/ceph/pull/60624/commits/919da3696668a07c6810dfa39301950c81c2eba4","tags":["article"]},{"url":"https://github.com/ceph/ceph/security/advisories/GHSA-5g9m-mmp6-93mq","tags":["article"]},{"url":"https://tracker.ceph.com/issues/68836","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241572-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1223979","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-34069","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241591-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241591-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241608-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241624-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241624-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-34069","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-46136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-102598","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-34069","title":"Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution","description":"Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.","status":"published","published":"2024-05-06T14:44:38.78Z","modified":"2025-02-21T18:03:28.226Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:34:23.516065Z"}],"euvd":[{"id":"EUVD-2024-1358","description":"Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.","status":"published","published":"2024-05-06T14:44:38Z","modified":"2025-02-21T18:03:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:53:25.922377Z"}],"ghsa":[{"id":"GHSA-2g68-c3qc-8985","title":"Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain","description":"The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger.","status":"published","published":"2024-05-06T14:21:27Z","modified":"2025-02-21T21:00:48Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:38:32.275316Z"}],"nvd":[{"id":"CVE-2024-34069","description":"Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.","status":"published","published":"2024-05-06T15:15:23.99Z","modified":"2026-06-17T07:32:50.85Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:09:56.122111Z"}],"osv":[{"id":"CVE-2024-34069","title":"Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution","description":"Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.","status":"published","published":"2024-05-06T14:44:38.78Z","modified":"2026-10-28T02:30:30.62458175Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T15:44:40.391953Z"},{"id":"DEBIAN-CVE-2024-34069","description":"Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.","status":"published","published":"2024-05-06T15:15:23.99Z","modified":"2026-11-02T12:02:25.217077672Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:42.530184Z"},{"id":"GHSA-2g68-c3qc-8985","title":"Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain","description":"The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger.","status":"published","published":"2024-05-06T14:21:27Z","modified":"2026-09-10T03:50:13.18912685Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T15:46:34.338541Z"},{"id":"OESA-2025-1997","title":"python-werkzeug security update","description":"A comprehensive WSGI web application library\r\n\r\nSecurity Fix(es):\n\nWerkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1.(CVE-2023-46136)\n\nWerkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer\u0026apos;s machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer\u0026apos;s application that will trigger the debugger. This vulnerability is fixed in 3.0.3.(CVE-2024-34069)","status":"published","published":"2025-08-15T11:09:04Z","modified":"2026-08-18T01:18:57.157106645Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1998","title":"python-werkzeug security update","description":"A comprehensive WSGI web application library\r\n\r\nSecurity Fix(es):\n\nWerkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1.(CVE-2023-46136)\n\nWerkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer\u0026apos;s machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer\u0026apos;s application that will trigger the debugger. This vulnerability is fixed in 3.0.3.(CVE-2024-34069)","status":"published","published":"2025-08-15T11:09:05Z","modified":"2026-08-18T01:18:57.180453607Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-2060","title":"python-werkzeug security update","description":"A comprehensive WSGI web application library\r\n\r\nSecurity Fix(es):\n\nWerkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer\u0026apos;s machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer\u0026apos;s application that will trigger the debugger. This vulnerability is fixed in 3.0.3.(CVE-2024-34069)","status":"published","published":"2025-08-22T11:09:08Z","modified":"2026-08-18T01:18:57.656090841Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"PYSEC-2026-2043","title":"Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain","description":"The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger.","status":"published","published":"2026-07-07T11:45:41.944642Z","modified":"2026-07-07T17:47:56.449875668Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:55.537808Z"},{"id":"RHSA-2024:10696","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-werkzeug) security update","status":"published","published":"2024-12-03T10:02:15Z","modified":"2026-08-13T10:04:15Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:5810","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.64 security update","status":"published","published":"2024-10-02T11:05:41Z","modified":"2026-10-09T10:11:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:6016","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.30 packages and security update","status":"published","published":"2024-09-14T00:19:41Z","modified":"2026-08-13T10:06:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:9975","title":"Red Hat Security Advisory: RHOSP 17.1.4 (python-werkzeug) security update","status":"published","published":"2024-11-25T09:53:59Z","modified":"2026-08-13T10:07:15Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2024:9976","title":"Red Hat Security Advisory: RHOSP 17.1.4 (python-werkzeug) security update","status":"published","published":"2024-11-25T09:53:50Z","modified":"2026-08-13T10:07:16Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:4664","title":"Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security, bug fix, and enhancement updates","status":"published","published":"2025-05-08T10:04:12Z","modified":"2026-10-17T10:06:51Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"UBUNTU-CVE-2024-34069","description":"Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.","status":"published","published":"2024-05-06T15:15:00Z","modified":"2026-02-04T03:14:34.284806Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:50.784131Z"},{"id":"AZL-40372","title":"CVE-2024-34069 affecting package python-werkzeug for versions less than 3.0.3-1","description":"Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.","status":"published","published":"2024-05-06T15:15:23Z","modified":"2026-04-21T04:50:45.326161Z","updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"AZL-40466","title":"CVE-2024-34069 affecting package python-werkzeug for versions less than 2.3.7-2","description":"Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.","status":"published","published":"2024-05-06T15:15:23Z","modified":"2026-04-21T04:29:03.162494Z","updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"CLSA-2026-1772410264","title":"TuxCare security update for werkzeug (2 CVEs)","description":"TuxCare rebuilt werkzeug to address 2 CVEs. Fixed in 1.0.1.post2+tuxcare.","status":"published","published":"2026-08-04T14:52:08Z","modified":"2026-10-15T09:47:58.734024138Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1772410380","title":"TuxCare security update for werkzeug (2 CVEs)","description":"TuxCare rebuilt werkzeug to address 2 CVEs. Fixed in 2.2.3.post1+tuxcare.","status":"published","published":"2026-08-04T14:52:09Z","modified":"2026-10-15T09:47:58.72642912Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1782176240","title":"TuxCare security update for werkzeug (1 CVE)","description":"TuxCare rebuilt werkzeug to address 1 CVE. Fixed in 2.3.8.post2+tuxcare.","status":"published","published":"2026-08-04T14:52:39Z","modified":"2026-10-15T09:48:01.101187068Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1789452814","title":"TuxCare security update for werkzeug (3 CVEs)","description":"TuxCare rebuilt werkzeug to address 3 CVEs. Fixed in 2.2.3.post5+tuxcare.","status":"published","published":"2026-09-15T06:13:34Z","modified":"2026-10-15T09:48:01.741067831Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1791187847","title":"TuxCare security update for werkzeug (2 CVEs)","description":"TuxCare rebuilt werkzeug to address 2 CVEs. Fixed in 0.16.1.post1+tuxcare.","status":"published","published":"2026-10-05T08:10:47Z","modified":"2026-10-15T09:48:02.405293195Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"DLA-4062-1","title":"python-werkzeug - security update","status":"published","published":"2025-02-21T00:00:00Z","modified":"2026-03-09T01:20:05.571336Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2024-0234","title":"Updated python-werkzeug packages fix security vulnerability","description":"Werkzeug is a comprehensive WSGI web application library. The debugger\nin affected versions of Werkzeug can allow an attacker to execute code\non a developer's machine under some circumstances. This requires the\nattacker to get the developer to interact with a domain and subdomain\nthey control, and enter the debugger PIN, but if they are successful it\nallows access to the debugger even if it is only running on localhost.\nThis also requires the attacker to guess a URL in the developer's\napplication that will trigger the debugger. This vulnerability is fixed\nin 3.0.3.\n","status":"published","published":"2024-06-24T19:04:12Z","modified":"2026-04-16T04:43:29.884916017Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:14042-1","title":"python310-Werkzeug-3.0.3-1.1 on GA media","description":"These are all security issues fixed in the python310-Werkzeug-3.0.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:31:49.647655Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2026:11943-1","title":"python313-Werkzeug-3.1.9-1.1 on GA media","description":"These are all security issues fixed in the python313-Werkzeug-3.1.9-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-01T00:00:00Z","modified":"2026-10-02T18:23:12.906515335Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"SUSE-SU-2024:1572-1","title":"Security update for python-Werkzeug","description":"This update for python-Werkzeug fixes the following issues:\n\n- CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979).\n","status":"published","published":"2024-05-09T11:18:15Z","modified":"2026-02-04T04:15:04.411473Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1591-1","title":"Security update for python-Werkzeug","description":"This update for python-Werkzeug fixes the following issues:\n\n- CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979).\n","status":"published","published":"2024-05-10T07:20:00Z","modified":"2026-02-04T03:26:52.497125Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1591-2","title":"Security update for python-Werkzeug","description":"This update for python-Werkzeug fixes the following issues:\n\n- CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979).\n","status":"published","published":"2024-06-18T11:06:29Z","modified":"2026-02-04T04:36:06.231734Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1608-1","title":"Security update for python-Werkzeug","description":"This update for python-Werkzeug fixes the following issues:\n\n- CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979).\n","status":"published","published":"2024-05-10T16:35:49Z","modified":"2026-02-04T02:29:57.777889Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1624-1","title":"Security update for python-Werkzeug","description":"This update for python-Werkzeug fixes the following issues:\n\n- CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979).\n","status":"published","published":"2024-05-13T14:26:09Z","modified":"2026-02-04T04:12:40.06708Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1624-2","title":"Security update for python-Werkzeug","description":"This update for python-Werkzeug fixes the following issues:\n\n- CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979).\n","status":"published","published":"2024-06-18T20:04:01Z","modified":"2026-02-04T04:07:11.005418Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"USN-6799-1","title":"python-werkzeug vulnerability","description":"It was discovered that the debugger in Werkzeug was not restricted to\ntrusted hosts. A remote attacker could possibly use this issue to execute\ncode on the host under certain circumstances.\n","status":"published","published":"2024-05-29T15:38:21Z","modified":"2026-06-25T13:32:28.602243123Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}