What’s Vulnerable › Products

Pylons Waitress vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Pylons Waitress version is affected

Latest Pylons Waitress vulnerabilities

• CVE-2024-49769 — Waitress has a denial of service leading to high CPU usage/resource exhaustion (CVSS 7.5)
• CVE-2024-49768 — Waitress has request processing race condition in HTTP pipelining with invalid first request (CVSS 4.8)
• CVE-2022-31015 — Uncaught Exception (due to a data race) leads to process termination in Waitress (CVSS 5.9)
• CVE-2022-24761 — HTTP Request Smuggling in waitress (CVSS 7.5)
• CVE-2020-5236 — Catastrophic backtracking in regex allows Denial of Service in Waitress (CVSS 6.5)
• CVE-2019-16792 — HTTP Request Smuggling: Content-Length Sent Twice in Waitress (CVSS 7.5)
• CVE-2019-16789 — HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers (CVSS 8.2)
• CVE-2019-16786 — HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress (CVSS 7.5)
• CVE-2019-16785 — HTTP Request Smuggling: LF vs CRLF handling in Waitress (CVSS 7.5)