Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

TI-2020-06215 CVE-2020-7695 · GHSA-f97h-2pfx-f59f

HTTP response splitting in uvicorn

Priority LOW 27

Uvicorn before 0.11.7 is vulnerable to HTTP response splitting.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01386 Published 2020-07-27 Fixed in 0.11.7 CWE-74
TI-2020-06214 CVE-2020-7694 · GHSA-33c7-2mpw-hg34

Log injection in uvicorn

Priority LOW 36

This affects all versions of package uvicorn.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01357 Published 2020-07-27 Fixed in 0.11.7 CWE-116