# werkzeug (PyPI) vulnerabilities 15 known vulnerabilities (3 high, 6 medium, 1 low), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 3.1.9 (Sep 27, 2026): no advisory affects it - Newest unaffected release: 3.1.9 (Sep 27, 2026), the latest release - Weekly downloads: 70.9M - Dependents: 19.9K - Releases: 106 since 0.1.0 (Dec 9, 2007) - Registry: https://pypi.org/project/werkzeug/ - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-102598: 0.1.0 to 3.1.8 (3.1.9 is outside it) - CVE-2026-27199: 0.1.0 to 3.1.5 (3.1.6 is outside it) - CVE-2026-21860: 0.1.0 to 3.1.4 (3.1.5 is outside it) - CVE-2025-66221: 0.1.0 to 3.1.3 (3.1.4 is outside it) - CVE-2024-49767: 2.0.0rc1 to 3.0.5 (3.0.6 is outside it) - CVE-2024-49766: 0.1.0 to 3.0.5 (3.0.6 is outside it) - CVE-2024-34069: 0.1.0 to 3.0.2 (3.0.3 is outside it) - CVE-2023-46136: 0.1.0 to 2.3.7 (2.3.8 is outside it); 3.0.0 (3.0.1 is outside it) - CVE-2023-25577: 0.1.0 to 2.2.2 (2.2.3 is outside it) - CVE-2023-23934: 0.1.0 to 2.2.2 (2.2.3 is outside it) - CVE-2022-29361: 0.1.0 to 2.1.0 (2.1.1 is outside it) - CVE-2020-28724: 0.1.0 to 0.11.5 (0.11.6 is outside it) - CVE-2019-14806: 0.1.0 to 0.15.2 (0.15.3 is outside it) - CVE-2019-14322: 0.1.0 to 0.15.4 (0.15.5 is outside it) - CVE-2016-10516: 0.1.0 to 0.11.10 (0.11.11 is outside it) ## Advisories (15) ### [CVE-2026-102598](https://cve.now/CVE-2026-102598): Werkzeug safe\_join() allows Windows special device names - Severity: Medium 6.3 - Published: Sep 29, 2026 - Affected: fixed in 3.1.9. - Fixed in 3.1.9 (released Sep 27, 2026, 2 days before disclosure). - The latest release, 3.1.9, is not affected. ### [CVE-2026-27199](https://cve.now/CVE-2026-27199): Werkzeug safe\_join() allows Windows special device names - Severity: Medium 6.3 - Published: Feb 21, 2026 - Affected: fixed in 3.1.6. - Fixed in 3.1.6 (released Feb 19, 2026, 2 days before disclosure). - The latest release, 3.1.9, is not affected. ### [CVE-2026-21860](https://cve.now/CVE-2026-21860): Werkzeug safe\_join() allows Windows special device names with compound extensions - Severity: Medium 6.3 - Published: Jan 8, 2026 - Affected: fixed in 3.1.5. - Fixed in 3.1.5 (released Jan 8, 2026, the day of disclosure). - The latest release, 3.1.9, is not affected. ### [CVE-2025-66221](https://cve.now/CVE-2025-66221): Werkzeug safe\_join() allows Windows special device names - Severity: Medium 6.3 - Published: Nov 29, 2025 - Affected: fixed in 3.1.4. - Fixed in 3.1.4 (released Nov 29, 2025, the day of disclosure). - The latest release, 3.1.9, is not affected. ### [CVE-2024-49767](https://cve.now/CVE-2024-49767): Werkzeug possible resource exhaustion when parsing file data in forms - Severity: Medium 6.9 - Published: Oct 25, 2024 - Affected: from 2.0.0rc1, fixed in 3.0.6. - Fixed in 3.0.6 (released Oct 25, 2024, the day of disclosure). - The latest release, 3.1.9, is not affected. ### [CVE-2024-49766](https://cve.now/CVE-2024-49766): Werkzeug safe\_join not safe on Windows - Severity: Medium 6.3 - Published: Oct 25, 2024 - Affected: fixed in 3.0.6. - Fixed in 3.0.6 (released Oct 25, 2024, the day of disclosure). - The latest release, 3.1.9, is not affected. ### [CVE-2024-34069](https://cve.now/CVE-2024-34069): Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution - Severity: High 7.5 - Published: May 6, 2024 - Affected: fixed in 3.0.3. - Fixed in 3.0.3 (released May 5, 2024, 1 day before disclosure). - The latest release, 3.1.9, is not affected. ### [CVE-2023-46136](https://cve.now/CVE-2023-46136): Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning - Severity: High 8.0 - Published: Oct 24, 2023 - Affected: from 3.0.0, fixed in 3.0.1; from 2.0.0rc1, fixed in 2.3.8; fixed in 2.3.8; from 3.0.0, fixed in 3.0.1. - Fixed in 2.3.8 (released Nov 8, 2023, 15 days after disclosure) and 3.0.1 (released Oct 24, 2023, the day of disclosure). - The latest release, 3.1.9, is not affected. ### [CVE-2023-25577](https://cve.now/CVE-2023-25577): Werkzeug may allow high resource usage when parsing multipart form data with many fields - Severity: High 7.5 - Published: Feb 14, 2023 - Affected: fixed in 2.2.3. - Fixed in 2.2.3 (released Feb 14, 2023, the day of disclosure). - The latest release, 3.1.9, is not affected. ### [CVE-2023-23934](https://cve.now/CVE-2023-23934): Wrkzeug's incorrect parsing of nameless cookies leads to \_\_Host- cookies bypass - Severity: Low 2.6 - Published: Feb 14, 2023 - Affected: fixed in 2.2.3. - Fixed in 2.2.3 (released Feb 14, 2023, the day of disclosure). - The latest release, 3.1.9, is not affected. ### [CVE-2022-29361](https://cve.now/CVE-2022-29361): Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted… - Severity: Unrated - Published: May 24, 2022 - Affected: fixed in 2.1.1. - Fixed in 2.1.1 (released Apr 1, 2022, 53 days before disclosure). - The latest release, 3.1.9, is not affected. ### [CVE-2020-28724](https://cve.now/CVE-2020-28724): Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL. - Severity: Unrated - Published: Nov 18, 2020 - Affected: fixed in 0.11.6; fixed in 0.11.6. - Fixed in 0.11.6 (released Apr 14, 2016, 1679 days before disclosure). - The latest release, 3.1.9, is not affected. ### [CVE-2019-14806](https://cve.now/CVE-2019-14806): Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same… - Severity: Unrated - Published: Aug 9, 2019 - Affected: fixed in 0.15.3; fixed in 0.15.3. - Fixed in 0.15.3 (released May 14, 2019, 87 days before disclosure). - The latest release, 3.1.9, is not affected. ### [CVE-2019-14322](https://cve.now/CVE-2019-14322): In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames. - Severity: Unrated - Published: Jul 28, 2019 - Affected: fixed in 0.15.5. - Fixed in 0.15.5 (released Jul 17, 2019, 11 days before disclosure). - The latest release, 3.1.9, is not affected. ### [CVE-2016-10516](https://cve.now/CVE-2016-10516): Cross-site scripting (XSS) vulnerability in the render\_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before… - Severity: Unrated - Published: Oct 23, 2017 - Affected: fixed in 0.11.11. - Fixed in 0.11.11 (released Aug 31, 2016, 418 days before disclosure). - The latest release, 3.1.9, is not affected. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/werkzeug Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.