Palletsprojects Quart vulnerabilities

1 known vulnerability affecting palletsprojects/quart.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2024-49767MEDIUMCVSS 6.9fixed in 0.19.72024-10-25

CVE-2024-49767 [MEDIUM] CWE-400 CVE-2024-49767: Werkzeug is a Web Server Gateway Interface web application library. Applications using `werkzeug.for Werkzeug is a Web Server Gateway Interface web application library. Applications using `werkzeug.formparser.MultiPartParser` corresponding to a version of Werkzeug prior to 3.0.6 to parse `multipart/form-data` requests (e.g. all flask applications) are vulnerable to a relatively simple but effective resource exhaustion (denial of service) attack. A