pypi

werkzeug

28 Total advisories

28 Vulnerabilities

0 Malware

Dependency scanning

Check whether werkzeug is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

werkzeug

Vulnerabilities

Werkzeug safe_join() allows Windows special device names

Werkzeug safe_join() allows Windows special device names with compound extensions

Werkzeug safe_join() allows Windows special device names

Werkzeug possible resource exhaustion when parsing file data in forms

Werkzeug safe_join not safe on Windows

Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain

Incorrect parsing of nameless cookies leads to __Host- cookies bypass

Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning

High resource usage when parsing multipart form data with many fields

Werkzeug possible resource exhaustion when parsing file data in forms

CVE-2026-27199

Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain

Werkzeug safe_join() allows Windows special device names with compound extensions

Werkzeug safe_join() allows Windows special device names

Werkzeug safe_join not safe on Windows

Pallets Werkzeug vulnerable to Path Traversal

Pallets Werkzeug vulnerable to Path Traversal

Pallets Werkzeug cross-site scripting vulnerability

Open Redirect in werkzeug

Pallets Werkzeug Insufficient Entropy

CVE-2023-46136

CVE-2023-25577

CVE-2023-23934

CVE-2022-29361

CVE-2020-28724

CVE-2019-14806

CVE-2016-10516

PYSEC-2019-70

Browse more PyPI advisories

Start Securing