Vulnerabilities

Search by TI id or any alias (CVE, GHSA), vendor, product or CWE.

Filters

Threatist priority CRITICAL 0 HIGH 0 MEDIUM 0 LOW 2

Signals Exploited in the wild (KEV) 0 Patch available 2 No fix listed 0 Has CVE 2

Fix status Fixed 2 Partial 0 Will not fix 0 Deferred 0 No fix listed 0

Attack vector Network 2 Adjacent network 0 Local 0 Physical 0

Requirements No authentication 2 No user interaction 2

Product

Products as named in CPE, with their records.

Published Last 7 days Last 30 days Last 12 months Any time

Weakness (CWE) CWE-348 Use of Less Trusted Source 1 CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization 1

1 selected

2 records

Sort

TI-2026-75151 CVE-2026-111450 · GHSA-fg56-4rxr-cx5x

Priority LOW 25

Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application.

CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00136 · Published 2026-10-16 · Fixed in 4.1.2 CWE-348

TI-2026-75150 CVE-2026-111449 · GHSA-rh8q-647v-56rc

Priority LOW 26

Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true (disabled by default).

CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.0021 · Published 2026-10-16 · Fixed in 4.1.2 CWE-362

Vulnerability intelligence for security teams and AI agents.

Newsletter Vulnerability intelligence in your inbox Subscribe

We would like to use Google Analytics cookies to see how the site is used. They are set only if you accept. Privacy policy