pallets Quart vulnerabilities

Latest pallets Quart CVEs

Newest publication first

1. CVE-2024-49767 Werkzeug possible resource exhaustion when parsing file data in forms

   Published 2024-10-25

   Medium·CVSS 6.9 EPSS 1.1%

   Werkzeug is a Web Server Gateway Interface web application library. Applications using werkzeug.formparser.MultiPartParser corresponding to a version of Werkzeug prior to 3.0.6 to parse multipart/form-data requests (e.g. all flask applications) are vulnerable to a relatively simp...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.