Werkzeug vulnerabilities (Root)

8 vulnerabilities.

• Werkzeug Root Werkzeug safe_join() allows Windows special device names CVE-2026-27199 Public exploitFix available 6.3 MediumFebruary 19, 2026
• Werkzeug Root Werkzeug safe_join() allows Windows special device names with compound extensions CVE-2026-21860 Fix available 6.3 MediumJanuary 8, 2026
• Werkzeug Root Werkzeug safe_join() allows Windows special device names CVE-2025-66221 Fix available 6.3 MediumNovember 29, 2025
• Werkzeug Root Werkzeug possible resource exhaustion when parsing file data in forms CVE-2024-49767 Fix available 6.9 MediumOctober 25, 2024
• Werkzeug Root Werkzeug safe_join not safe on Windows CVE-2024-49766 Fix available 6.3 MediumOctober 25, 2024
• Werkzeug Root Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution CVE-2024-34069 Public exploitFix available 7.5 HighMay 6, 2024
• Werkzeug Root Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning CVE-2023-46136 Public exploitFix available 8.0 HighOctober 24, 2023
• Werkzeug Root Werkzeug may allow high resource usage when parsing multipart form data with many fields CVE-2023-25577 Fix available 7.5 HighFebruary 14, 2023