bottlepy Bottle 0.10.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:bottlepy:bottle:0.10.0:*:*:*:*:*:*:*

part: a version: 0.10.0 update: *

VendorBottlepy (38805570-29df-55f6-96eb-37baf7691b21)
ProductBottle (be3c787d-8aaf-5d5f-9411-cde8ced2e743)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/python-bottle purl2cpe 2026-06-01 10:10:55.632955
pkg:deb/ubuntu/python-bottle purl2cpe 2026-06-01 10:10:55.632959
pkg:github/bottlepy/bottle purl2cpe 2026-06-01 10:10:55.632964
pkg:pypi/bottle purl2cpe 2026-06-01 10:10:55.632968
pkg:rpm/fedora/python-bottle purl2cpe 2026-06-01 10:10:55.632972
pkg:rpm/opensuse/python-bottle purl2cpe 2026-06-01 10:10:55.632977

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3137 vulnerable 2026-06-08 05:05:31.280922 Details available
Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted Content-Type followed by a ; (semi-colon) and a Content-Type that would not be accepted, as demonstrated in YouCompleteMe to execute arbitrary code.
Published: 2014-10-25T22:00:00.000Z
Updated: 2024-08-06T10:35:56.668Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.