PY
Vendor
Pylons
7
CVEs
0
On KEV
0
New 30D
Products
WE6.1
webob
Pylons
3 CVEs0 on KEV0 new
WA7.5
waitress
Pylons
2 CVEs0 on KEV0 new
HO5.3
horus
Pylons
1 CVEs0 on KEV0 new
PY5.3
pyramid
Pylons
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-54770 | WE webob Pylons | 6.1 | Aug 20 | WebOb: Open redirect in Location header normalization via leading C0 control / space characters |
| CVE-2026-44889 | WE webob Pylons | 6.1 | Jun 22 | WebOb: Location header normalization during redirect leads to open redirect |
| CVE-2024-49768 | WA waitress Pylons | 4.8 | Oct 29 | Waitress has request processing race condition in HTTP pipelining with invalid first request |
| CVE-2024-49769 | WA waitress Pylons | 7.5 | Oct 29 | Waitress has a denial of service leading to high CPU usage/resource exhaustion |
| CVE-2024-42353 | WE webob Pylons | 6.1 | Aug 14 | WebOb's location header normalization during redirect leads to open redirect |
| CVE-2023-40587 | PY pyramid Pylons | 5.3 | Aug 25 | Pyramid static view path traversal up one directory |
| CVE-2014-125056 | HO horus Pylons | 5.3 | Jan 7 | Pylons horus services.py timing discrepancy |