Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-16769 State: PUBLISHED Published: 2019-12-05T18:55:15 Last Updated: 2024-08-05T01:24:47.226Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: yahoo Products: serialize-javascript Problem Types: CWE-79 Description: The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of RegExp.prototype.toString() backslash-escapes all forward slashes in regular expressions. If serialized data of regular expression objects are used in
ckslash-escapes all forward slashes in regular expressions. If serialized data of regular expression objects are used in an environment other than Node.js, it is affected by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yahoo/serialize-javascript/security/advisories/GHSA-h9rv-jmmf-4pgx
CVE ID: CVE-2019-16770 State: PUBLISHED Published: 2019-12-05T19:35:14 Last Updated: 2024-08-05T01:24:48.578Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: puma Products: puma Problem Types: CWE-770 Description: In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack. If more keepalive connections to Puma are opened than there are threads available, additional connections will wait permanently if the attacker sends requests frequently enough. This vulnerability is patched in Puma 4.3.1 and 3.12.2. Additional Analyst Notes: - CVE Program Container: Refe
enough. This vulnerability is patched in Puma 4.3.1 and 3.12.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/puma/puma/security/advisories/GHSA-7xx3-m584-x994 - https://lists.debian.org/debian-lts-announce/2022/05/msg00034.html
CVE ID: CVE-2019-16771 State: PUBLISHED Published: 2019-12-06T19:00:20 Last Updated: 2024-08-05T01:24:48.270Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: LINE Products: Armeria Problem Types: CWE-113 Description: Versions of Armeria 0.85.0 through and including 0.96.0 are vulnerable to HTTP response splitting, which allows remote attackers to inject arbitrary HTTP headers via CRLF sequences when unsanitized data is used to populate the headers of an HTTP response. This vulnerability has been patched in 0.97.0. Potential impacts of this vulnerability include cross-user defacement, cache poisoning, Cross-site scripting (XSS), and page hijacking. Additional
vulnerability include cross-user defacement, cache poisoning, Cross-site scripting (XSS), and page hijacking. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/line/armeria/security/advisories/GHSA-35fr-h7jr-hh86 - https://github.com/line/armeria/commit/b597f7a865a527a84ee3d6937075cfbb4470ed20
CVE ID: CVE-2019-16772 State: PUBLISHED Published: 2019-12-06T23:25:14 Last Updated: 2024-08-05T01:24:48.633Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: commenthol Products: serialize-to-js Problem Types: CWE-79 Description: The serialize-to-js NPM package before version 3.0.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of RegExp.prototype.toString() backslash-escapes all forward slashes in regular expressions. If serialized data of regular expression objects are used in an envi
escapes all forward slashes in regular expressions. If serialized data of regular expression objects are used in an environment other than Node.js, it is affected by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/commenthol/serialize-to-js/security/advisories/GHSA-3fjq-93xj-3f3f - https://github.com/commenthol/serialize-to-js/commit/181d7d583ae5293cd47cc99b14ad13352875f3e3
CVE ID: CVE-2019-16773 State: REJECTED Published: 2020-01-09T02:00:16 Last Updated: 2020-01-10T21:04:25 Description: No description available.
CVE ID: CVE-2019-16774 State: PUBLISHED Published: 2019-12-12T23:05:15 Last Updated: 2024-08-05T01:24:47.897Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: PHPSocialNetwork Products: phpfastcache Problem Types: CWE-94 Description: In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PHPSocialNetwork/phpfastcache/security/advisories/GHSA-484f-743f-6jx2 - https://github.com/PHPSocialNetwork/phpfastcache/commit/c4527205cb7a402b595790c74310791f5b04a1a4 - https://github.com/PHPSocialNetwork/phpfastcache/releases/tag/5.0.13
CVE ID: CVE-2019-16775 State: PUBLISHED Published: 2019-12-13T00:55:15 Last Updated: 2024-08-05T01:24:48.326Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: npm Products: cli Problem Types: CWE-61 Description: Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It is possible for packages to create symlinks to files outside of thenode_modules folder through the bin field upon installation. A properly constructed entry in the package.json bin field would allow a package publisher to create a symlink pointing to arbitrary files on a user's system when the package is installed. This behavior is still possible through install script
arbitrary files on a user's system when the package is installed. This behavior is still possible through install scripts. This vulnerability bypasses a user using the --ignore-scripts install option. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00027.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z36UKPO5F3PQ3Q2POMF5LEKXWAH5RUFP/ - https://access.redhat.com/errata/RHEA-2020:0330 - https://access.redhat.com/errata/RHSA-2020:0573 - https://access.redhat.com/errata/RHSA-2020:0579 - https://access.redhat.com/errata/RHSA-2020:0597 - https://access.redhat.co
s://access.redhat.com/errata/RHSA-2020:0579 - https://access.redhat.com/errata/RHSA-2020:0597 - https://access.redhat.com/errata/RHSA-2020:0602 - https://www.oracle.com/security-alerts/cpujan2020.html - https://www.oracle.com/security-alerts/cpuoct2021.html - https://github.com/npm/cli/security/advisories/GHSA-m6cx-g6qm-p2cx - https://blog.npmjs.org/post/189618601100/binary-planting-with-the-npm-cli
CVE ID: CVE-2019-16776 State: PUBLISHED Published: 2019-12-13T00:55:16 Last Updated: 2024-08-05T01:24:48.040Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: npm Products: cli Problem Types: CWE-22 Description: Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It fails to prevent access to folders outside of the intended node_modules folder through the bin field. A properly constructed entry in the package.json bin field would allow a package publisher to modify and/or gain access to arbitrary files on a user's system when the package is installed. This behavior is still possible through install scripts. This vulnerability bypa
s system when the package is installed. This behavior is still possible through install scripts. This vulnerability bypasses a user using the --ignore-scripts install option. Additional Analyst Notes: - CVE Program Container: References: - https://blog.npmjs.org/post/189618601100/binary-planting-with-the-npm-cli - https://github.com/npm/cli/security/advisories/GHSA-x8qc-rrcw-4r46 - https://www.oracle.com/security-alerts/cpujan2020.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00027.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z36UKPO5F3PQ3Q2POMF5LEKXWAH5RUFP/ - https://access.redhat.com/errata/RHEA-2020:0330
e%40lists.fedoraproject.org/message/Z36UKPO5F3PQ3Q2POMF5LEKXWAH5RUFP/ - https://access.redhat.com/errata/RHEA-2020:0330 - https://access.redhat.com/errata/RHSA-2020:0573 - https://access.redhat.com/errata/RHSA-2020:0579 - https://access.redhat.com/errata/RHSA-2020:0597 - https://access.redhat.com/errata/RHSA-2020:0602
CVE ID: CVE-2019-16777 State: PUBLISHED Published: 2019-12-13T01:00:21 Last Updated: 2024-08-05T01:24:47.252Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: npm Products: cli Problem Types: CWE-22 Description: Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite. It fails to prevent existing globally-installed binaries to be overwritten by other package installations. For example, if a package was installed globally and created a serve binary, any subsequent installs of packages that also create a serve binary would overwrite the previous serve binary. This behavior is still allowed in local installations and also through inst
y would overwrite the previous serve binary. This behavior is still allowed in local installations and also through install scripts. This vulnerability bypasses a user using the --ignore-scripts install option. Additional Analyst Notes: - CVE Program Container: References: - https://blog.npmjs.org/post/189618601100/binary-planting-with-the-npm-cli - https://github.com/npm/cli/security/advisories/GHSA-4328-8hgf-7wjr - https://www.oracle.com/security-alerts/cpujan2020.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00027.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z36UKPO5F3PQ3Q2POMF5LEKXWAH5RUFP/ - https://acce
ct.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z36UKPO5F3PQ3Q2POMF5LEKXWAH5RUFP/ - https://access.redhat.com/errata/RHEA-2020:0330 - https://access.redhat.com/errata/RHSA-2020:0573 - https://access.redhat.com/errata/RHSA-2020:0579 - https://access.redhat.com/errata/RHSA-2020:0597 - https://access.redhat.com/errata/RHSA-2020:0602 - https://security.gentoo.org/glsa/202003-48
CVE ID: CVE-2019-16778 State: PUBLISHED Published: 2019-12-16T20:15:14 Last Updated: 2024-08-05T01:24:48.540Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: tensorflow Products: tensorflow Problem Types: CWE-122 Description: In TensorFlow before 1.15, a heap buffer overflow in UnsortedSegmentSum can be produced when the Index template argument is int32. In this case data_size and num_segments fields are truncated from int64 to int32 and can produce negative numbers, resulting in accessing out of bounds heap memory. This is unlikely to be exploitable and was detected and fixed internally in TensorFlow 1.15 and 2.0. Additional Analyst Notes: - CVE Program Contai
oitable and was detected and fixed internally in TensorFlow 1.15 and 2.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tensorflow/tensorflow/security/advisories/GHSA-844w-j86r-4x2j - https://github.com/tensorflow/tensorflow/commit/db4f9717c41bccc3ce10099ab61996b246099892 - https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2019-002.md
CVE ID: CVE-2019-16779 State: PUBLISHED Published: 2019-12-16T19:35:13 Last Updated: 2024-08-05T01:24:48.572Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: excon Products: excon Problem Types: CWE-664 Description: In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the socket. Subsequent requests would then read this data, returning content from the previous response. The race condition window appears to be short, and it would be difficult to purposefully exploit this. Additional Analyst Notes: - CVE Program Container: References: - http
t would be difficult to purposefully exploit this. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/excon/excon/security/advisories/GHSA-q58g-455p-8vw9 - https://github.com/excon/excon/commit/ccb57d7a422f020dc74f1de4e8fb505ab46d8a29 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00021.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00062.html
CVE ID: CVE-2019-16780 State: PUBLISHED Published: 2019-12-26T16:50:13 Last Updated: 2024-08-05T01:24:47.245Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: WordPress Products: WordPress Problem Types: CWE-79 Description: WordPress users with lower privileges (like contributors) can inject JavaScript code in the block editor using a specific payload, which is executed within the dashboard. This can lead to XSS if an admin opens the post in the editor. Execution of this attack does require an authenticated user. This has been patched in WordPress 5.3.1, along with all the previous WordPress versions from 3.7 to 5.3 via a minor release. Automatic updates are
dPress 5.3.1, along with all the previous WordPress versions from 3.7 to 5.3 via a minor release. Automatic updates are enabled by default for minor releases and we strongly recommend that you keep them enabled. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9976 - https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-x3wp-h3qx-9w94 - https://wordpress.org/news/2019/12/wordpress-5-3-1-security-and-maintenance-release/ - https://github.com/WordPress/wordpress-develop/commit/505dd6a20b6fc3d06130018c1caeff764248c29e - https://hackerone.com/reports/738644 - https://seclists.org/bugtraq/2020/Jan/8 - https://www.debian.org/se
f764248c29e - https://hackerone.com/reports/738644 - https://seclists.org/bugtraq/2020/Jan/8 - https://www.debian.org/security/2020/dsa-4599 - https://www.debian.org/security/2020/dsa-4677
CVE ID: CVE-2019-16781 State: PUBLISHED Published: 2019-12-26T17:00:17 Last Updated: 2024-08-05T01:24:48.284Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: WordPress Products: WordPress Problem Types: CWE-79 Description: In WordPress before 5.3.1, authenticated users with lower privileges (like contributors) can inject JavaScript code in the block editor, which is executed within the dashboard. It can lead to an admin opening the affected post in the editor leading to XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9976 - https://wordpress.org/news/2019/12/wordpress-5-3-1-security-and-maintenance-r
ttps://wpvulndb.com/vulnerabilities/9976 - https://wordpress.org/news/2019/12/wordpress-5-3-1-security-and-maintenance-release/ - https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-pg4x-64rh-3c9v - https://hackerone.com/reports/731301 - https://seclists.org/bugtraq/2020/Jan/8 - https://www.debian.org/security/2020/dsa-4599 - https://www.debian.org/security/2020/dsa-4677
CVE ID: CVE-2019-16782 State: PUBLISHED Published: 2019-12-18T19:05:14 Last Updated: 2024-08-05T01:24:48.031Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: rack Products: rack Problem Types: CWE-208 Description: There's a possible information leak / session hijack vulnerability in Rack (RubyGem rack). This vulnerability is patched in versions 1.6.12 and 2.0.8. Attackers may be able to find and hijack sessions by using timing attacks targeting the session id. Session ids are usually stored and indexed in a database that uses some kind of scheme for speeding up lookups of that session id. By carefully measuring the amount of time it takes to look up a sessio
cheme for speeding up lookups of that session id. By carefully measuring the amount of time it takes to look up a session, an attacker may be able to find a valid session id and hijack the session. The session id itself may be generated randomly, but the way the session is indexed by the backing store does not use a secure comparison. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rack/rack/security/advisories/GHSA-hrqr-hxpp-chr3 - https://github.com/rack/rack/commit/7fecaee81f59926b6e1913511c90650e76673b38 - http://www.openwall.com/lists/oss-security/2019/12/18/3 - http://www.openwall.com/lists/oss-security/2019/12/18/2 - http://www.openwall.com/lists/os
s/oss-security/2019/12/18/3 - http://www.openwall.com/lists/oss-security/2019/12/18/2 - http://www.openwall.com/lists/oss-security/2019/12/19/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZXMWILCICQLA2BYSP6I2CRMUG53YBLX/ - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00016.html - http://www.openwall.com/lists/oss-security/2020/04/08/1 - http://www.openwall.com/lists/oss-security/2020/04/09/2
CVE ID: CVE-2019-16784 State: PUBLISHED Published: 2020-01-14T20:10:12 Last Updated: 2024-08-05T01:24:48.332Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: PyInstaller Products: PyInstaller Problem Types: CWE-250 Description: In PyInstaller before version 3.6, only on Windows, a local privilege escalation vulnerability is present in this particular case: If a software using PyInstaller in "onefile" mode is launched by a privileged user (at least more than the current one) which have his "TempPath" resolving to a world writable directory. This is the case for example if the software is launched as a service or as a scheduled task using a system account (TempPat
is the case for example if the software is launched as a service or as a scheduled task using a system account (TempPath will be C:\Windows\Temp). In order to be exploitable the software has to be (re)started after the attacker launch the exploit program, so for a service launched at startup, a service restart is needed (e.g. after a crash or an upgrade). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pyinstaller/pyinstaller/security/advisories/GHSA-7fcj-pq9j-wh2r
CVE ID: CVE-2019-16785 State: PUBLISHED Published: 2019-12-20T23:00:25 Last Updated: 2024-08-05T01:24:47.876Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N) Vendors: Pylons Products: Waitress Problem Types: CWE-444 Description: Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Although the line terminator for the start-line and header fields is the sequence CRLF, a recipient MAY recognize a single LF as a line terminator and ignore any preceding CR." Unfortunately if a front-end server does not parse header fields with an LF the same way as it does those with a CRLF it can lead to the front-end and the back-end server parsing the sa
with an LF the same way as it does those with a CRLF it can lead to the front-end and the back-end server parsing the same HTTP message in two different ways. This can lead to a potential for HTTP request smuggling/splitting whereby Waitress may see two requests while the front-end server only sees a single HTTP message. This issue is fixed in Waitress 1.4.0. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GVDHR2DNKCNQ7YQXISJ45NT4IQDX3LJ7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYEOTGWJZVKPRXX2HBNVIYWCX73QYPM5/ - https:/
project.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYEOTGWJZVKPRXX2HBNVIYWCX73QYPM5/ - https://access.redhat.com/errata/RHSA-2020:0720 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://docs.pylonsproject.org/projects/waitress/en/latest/#security-fixes - https://github.com/Pylons/waitress/security/advisories/GHSA-pg36-wpm5-g57p - https://github.com/Pylons/waitress/commit/8eba394ad75deaf9e5cd15b78a3d16b12e6b0eba - https://lists.debian.org/debian-lts-announce/2022/05/msg00011.html
CVE ID: CVE-2019-16786 State: PUBLISHED Published: 2019-12-20T23:00:20 Last Updated: 2024-08-05T01:24:48.017Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N) Vendors: Pylons Products: Waitress Problem Types: CWE-444 Description: Waitress through version 1.3.1 would parse the Transfer-Encoding header and only look for a single string value, if that value was not chunked it would fall through and use the Content-Length header instead. According to the HTTP standard Transfer-Encoding should be a comma separated list, with the inner-most encoding first, followed by any further transfer codings, ending with chunked. Requests sent with: "Transfer-Encoding: gzip, chunked" wou
ollowed by any further transfer codings, ending with chunked. Requests sent with: "Transfer-Encoding: gzip, chunked" would incorrectly get ignored, and the request would use a Content-Length header instead to determine the body size of the HTTP message. This could allow for Waitress to treat a single request as multiple requests in the case of HTTP pipelining. This issue is fixed in Waitress 1.4.0. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GVDHR2DNKCNQ7YQXISJ45NT4IQDX3LJ7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYE
ISJ45NT4IQDX3LJ7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYEOTGWJZVKPRXX2HBNVIYWCX73QYPM5/ - https://access.redhat.com/errata/RHSA-2020:0720 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://docs.pylonsproject.org/projects/waitress/en/latest/#security-fixes - https://github.com/Pylons/waitress/security/advisories/GHSA-g2xc-35jw-c63p - https://github.com/Pylons/waitress/commit/f11093a6b3240fc26830b6111e826128af7771c3 - https://lists.debian.org/debian-lts-announce/2022/05/msg00011.html
CVE ID: CVE-2019-16787 State: REJECTED Published: 2019-12-20T22:40:13 Last Updated: 2019-12-23T00:15:26 Description: No description available.
CVE ID: CVE-2019-16788 State: REJECTED Published: 2020-01-09T02:25:12 Last Updated: 2020-01-10T20:42:11 Description: No description available.
CVE ID: CVE-2019-16789 State: PUBLISHED Published: 2019-12-26T16:40:12 Last Updated: 2024-08-05T01:24:48.331Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N) Vendors: Pylons Products: Waitress Problem Types: CWE-444 Description: In Waitress through version 1.4.0, if a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress leading to a potential for HTTP request smuggling. Specially crafted requests containing special whitespace characters in the Transfer-Encoding header would get parsed by Waitress as being a chunked request, but a front-end server would use the Content-
r-Encoding header would get parsed by Waitress as being a chunked request, but a front-end server would use the Content-Length instead as the Transfer-Encoding header is considered invalid due to containing invalid characters. If a front-end server does HTTP pipelining to a backend Waitress server this could lead to HTTP request splitting which may lead to potential cache poisoning or unexpected information disclosure. This issue is fixed in Waitress 1.4.1 through more strict HTTP field validation. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GVDHR2DNKCNQ7YQXISJ45NT4IQDX3LJ7/