PPylons

Products

Exploited and recent CVEs

• CVE-2026-54770 Medium 6.1 WebOb: Open redirect in Location header normalization via leading C0 control / space characters 0.4%
• CVE-2026-44889 Medium 6.1 WebOb: Location header normalization during redirect leads to open redirect 0.3%
• CVE-2024-49768 Critical 9.1 Waitress has request processing race condition in HTTP pipelining with invalid first request 0.5%
• CVE-2024-49769 High 7.5 Waitress has a denial of service leading to high CPU usage/resource exhaustion 1.4%
• CVE-2024-42353 Medium 6.1 WebOb's location header normalization during redirect leads to open redirect 0.6%
• CVE-2023-40587 Medium 4.3 Pyramid static view path traversal up one directory 0.8%
• CVE-2022-31015 Medium 6.5 Uncaught Exception (due to a data race) leads to process termination in Waitress 1.5%
• CVE-2022-24761 High 7.5 HTTP Request Smuggling in waitress 1.8%
• CVE-2020-5236 Medium 5.7 Catastrophic backtracking in regex allows Denial of Service in Waitress 2.4%