PyPIPackage

werkzeug

15 known vulnerabilities (3 high, 6 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release: 3.1.9 (Sep 27, 2026): no advisory affects it
Newest unaffected release: 3.1.9 (Sep 27, 2026), the latest release
Advisories: 15 · 3 high, 6 medium, 1 low

Weekly downloads: 70.9M
Dependents: 19.9K
Releases: 106 since 0.1.0 (Dec 9, 2007)
Registry: PyPI
Releases read: Nov 8, 2026

Version timeline

CVE-2026-102598
Affects 0.1.0 to 3.1.8 (3.1.9 is outside it)
CVE-2026-27199
Affects 0.1.0 to 3.1.5 (3.1.6 is outside it)
CVE-2026-21860
Affects 0.1.0 to 3.1.4 (3.1.5 is outside it)
CVE-2025-66221
Affects 0.1.0 to 3.1.3 (3.1.4 is outside it)
CVE-2024-49767
Affects 2.0.0rc1 to 3.0.5 (3.0.6 is outside it)
CVE-2024-49766
Affects 0.1.0 to 3.0.5 (3.0.6 is outside it)
CVE-2024-34069
Affects 0.1.0 to 3.0.2 (3.0.3 is outside it)
CVE-2023-46136
Affects 0.1.0 to 2.3.7 (2.3.8 is outside it); 3.0.0 (3.0.1 is outside it)
CVE-2023-25577
Affects 0.1.0 to 2.2.2 (2.2.3 is outside it)
CVE-2023-23934
Affects 0.1.0 to 2.2.2 (2.2.3 is outside it)
CVE-2022-29361
Affects 0.1.0 to 2.1.0 (2.1.1 is outside it)
CVE-2020-28724
Affects 0.1.0 to 0.11.5 (0.11.6 is outside it)

Show all 15 advisoriesShow fewer advisories

CVE-2019-14806
Affects 0.1.0 to 0.15.2 (0.15.3 is outside it)
CVE-2019-14322
Affects 0.1.0 to 0.15.4 (0.15.5 is outside it)
CVE-2016-10516
Affects 0.1.0 to 0.11.10 (0.11.11 is outside it)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 15

CVE-2026-102598Medium 6.3
Werkzeug safe_join() allows Windows special device names
Affected: fixed in 3.1.9.
Fixed in 3.1.9 (released Sep 27, 2026, 2 days before disclosure).
The latest release, 3.1.9, is not affected.
CVE-2026-27199Medium 6.3
Werkzeug safe_join() allows Windows special device names
Affected: fixed in 3.1.6.
Fixed in 3.1.6 (released Feb 19, 2026, 2 days before disclosure).
The latest release, 3.1.9, is not affected.
CVE-2026-21860Medium 6.3
Werkzeug safe_join() allows Windows special device names with compound extensions
Affected: fixed in 3.1.5.
Fixed in 3.1.5 (released Jan 8, 2026, the day of disclosure).
The latest release, 3.1.9, is not affected.
CVE-2025-66221Medium 6.3
Werkzeug safe_join() allows Windows special device names
Affected: fixed in 3.1.4.
Fixed in 3.1.4 (released Nov 29, 2025, the day of disclosure).
The latest release, 3.1.9, is not affected.
CVE-2024-49767Medium 6.9
Werkzeug possible resource exhaustion when parsing file data in forms
Affected: from 2.0.0rc1, fixed in 3.0.6.
Fixed in 3.0.6 (released Oct 25, 2024, the day of disclosure).
The latest release, 3.1.9, is not affected.
CVE-2024-49766Medium 6.3
Werkzeug safe_join not safe on Windows
Affected: fixed in 3.0.6.
Fixed in 3.0.6 (released Oct 25, 2024, the day of disclosure).
The latest release, 3.1.9, is not affected.
CVE-2024-34069High 7.5
Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution
Affected: fixed in 3.0.3.
Fixed in 3.0.3 (released May 5, 2024, 1 day before disclosure).
The latest release, 3.1.9, is not affected.
CVE-2023-46136High 8.0
Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning
Affected: from 3.0.0, fixed in 3.0.1; from 2.0.0rc1, fixed in 2.3.8; fixed in 2.3.8; from 3.0.0, fixed in 3.0.1.
Fixed in 2.3.8 (released Nov 8, 2023, 15 days after disclosure) and 3.0.1 (released Oct 24, 2023, the day of disclosure).
The latest release, 3.1.9, is not affected.
CVE-2023-25577High 7.5
Werkzeug may allow high resource usage when parsing multipart form data with many fields
Affected: fixed in 2.2.3.
Fixed in 2.2.3 (released Feb 14, 2023, the day of disclosure).
The latest release, 3.1.9, is not affected.
CVE-2023-23934Low 2.6
Wrkzeug's incorrect parsing of nameless cookies leads to __Host- cookies bypass
Affected: fixed in 2.2.3.
Fixed in 2.2.3 (released Feb 14, 2023, the day of disclosure).
The latest release, 3.1.9, is not affected.
CVE-2022-29361Unrated
Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted…
Affected: fixed in 2.1.1.
Fixed in 2.1.1 (released Apr 1, 2022, 53 days before disclosure).
The latest release, 3.1.9, is not affected.
CVE-2020-28724Unrated
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL.
Affected: fixed in 0.11.6; fixed in 0.11.6.
Fixed in 0.11.6 (released Apr 14, 2016, 1679 days before disclosure).
The latest release, 3.1.9, is not affected.
CVE-2019-14806Unrated
Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same…
Affected: fixed in 0.15.3; fixed in 0.15.3.
Fixed in 0.15.3 (released May 14, 2019, 87 days before disclosure).
The latest release, 3.1.9, is not affected.
CVE-2019-14322Unrated
In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.
Affected: fixed in 0.15.5.
Fixed in 0.15.5 (released Jul 17, 2019, 11 days before disclosure).
The latest release, 3.1.9, is not affected.
CVE-2016-10516Unrated
Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before…
Affected: fixed in 0.11.11.
Fixed in 0.11.11 (released Aug 31, 2016, 418 days before disclosure).
The latest release, 3.1.9, is not affected.