web2py vulnerabilities (PyPI)

8 vulnerabilities.

• web2py PyPI web2py has an Open Redirect Vulnerability CVE-2026-25198 Fix available 5.1 MediumFebruary 5, 2026
• web2py PyPI Open redirect in web2py CVE-2023-22432 Public exploitFix available 6.1 MediumMarch 5, 2023
• web2py PyPI Open redirect in web2py CVE-2022-33146 Fix available 6.1 MediumJune 27, 2022
• web2py PyPI web2py exposure of sensitive information CVE-2016-3954 Fix available 5.5 MediumFebruary 6, 2018
• web2py PyPI web2py remote code execution via hardcoded encryption key in session.connect function CVE-2016-3953 Fix available 9.8 CriticalFebruary 6, 2018
• web2py PyPI web2py is vulnerable to password brute-force attack CVE-2016-10321 Fix available 9.8 CriticalApril 10, 2017
• web2py PyPI Web2py Cross-Site Request Forgery vulnerability CVE-2016-4808 Public exploitFix available 8.8 HighJanuary 11, 2017
• web2py PyPI Web2py Reflected XSS vulnerability CVE-2016-4807 Public exploit 4.8 MediumJanuary 11, 2017