Pylons Waitress vulnerabilities

• agendaless waitress Waitress has request processing race condition in HTTP pipelining with invalid first request CVE-2024-49768 Fix available 9.1 CriticalOctober 29, 2024
• agendaless waitress Waitress has a denial of service leading to high CPU usage/resource exhaustion CVE-2024-49769 Fix available 7.5 HighOctober 29, 2024
• agendaless waitress Uncaught Exception (due to a data race) leads to process termination in Waitress CVE-2022-31015 Fix available 6.5 MediumMay 31, 2022
• agendaless waitress, debian linux +1 more HTTP Request Smuggling in waitress CVE-2022-24761 Fix available 7.5 HighMarch 17, 2022
• agendaless waitress Catastrophic backtracking in regex allows Denial of Service in Waitress CVE-2020-5236 Public exploitFix available 5.7 MediumFebruary 4, 2020
• agendaless waitress, debian linux, fedoraproject fedora +2 more +4 more HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers CVE-2019-16789 Fix available 7.1 HighDecember 26, 2019
• agendaless waitress, debian linux, oracle communications cloud native core network function cloud native environment +2 more HTTP Request Smuggling: Content-Length Sent Twice in Waitress CVE-2019-16792 Fix available 7.1 HighDecember 20, 2019
• agendaless waitress, debian linux, fedoraproject fedora +2 more +4 more HTTP Request Smuggling: LF vs CRLF handling in Waitress CVE-2019-16785 Fix available 7.1 HighDecember 20, 2019
• agendaless waitress, debian linux, fedoraproject fedora +2 more +4 more HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress CVE-2019-16786 Fix available 7.1 HighDecember 20, 2019