pallets werkzeug

• CVE-2026-102598 Medium 6.3 Werkzeug safe_join() allows Windows special device names 0.4%
• CVE-2026-27199 Medium 6.3 Werkzeug safe_join() allows Windows special device names 0.6%
• CVE-2026-21860 Medium 6.3 Werkzeug safe_join() allows Windows special device names with compound extensions 0.5%
• CVE-2025-66221 Medium 6.3 Werkzeug safe_join() allows Windows special device names 0.5%
• CVE-2024-49767 Medium 6.9 Werkzeug possible resource exhaustion when parsing file data in forms 1.1%
• CVE-2024-49766 Medium 6.3 Werkzeug safe_join not safe on Windows 0.8%
• CVE-2024-34069 High 7.5 Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution 3.4%
• CVE-2023-46136 High 8.0 Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning 1.3%
• CVE-2023-25577 High 7.5 Werkzeug may allow high resource usage when parsing multipart form data with many fields 1.4%
• CVE-2023-23934 Low 2.6 Wrkzeug's incorrect parsing of nameless cookies leads to __Host- cookies bypass 0.5%