bottlepy Bottle 0.10.7

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:bottlepy:bottle:0.10.7:*:*:*:*:*:*:*

part: a version: 0.10.7 update: *

VendorBottlepy (38805570-29df-55f6-96eb-37baf7691b21)
ProductBottle (be3c787d-8aaf-5d5f-9411-cde8ced2e743)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/python-bottle purl2cpe 2026-06-01 10:10:55.633096
pkg:deb/ubuntu/python-bottle purl2cpe 2026-06-01 10:10:55.633099
pkg:github/bottlepy/bottle purl2cpe 2026-06-01 10:10:55.633101
pkg:pypi/bottle purl2cpe 2026-06-01 10:10:55.633103
pkg:rpm/fedora/python-bottle purl2cpe 2026-06-01 10:10:55.633105
pkg:rpm/opensuse/python-bottle purl2cpe 2026-06-01 10:10:55.633107

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3137 vulnerable 2026-06-08 05:05:31.284438 Details available
Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted Content-Type followed by a ; (semi-colon) and a Content-Type that would not be accepted, as demonstrated in YouCompleteMe to execute arbitrary code.
Published: 2014-10-25T22:00:00.000Z
Updated: 2024-08-06T10:35:56.668Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.