Approved changes feed: RSS · Atom
cpe:2.3:a:palletsprojects:quart:*:*:*:*:*:python:*:*
part: a version: * update: *
| Vendor | Palletsprojects (53744b77-ee51-53ab-bf41-21b127ba0bd8) |
|---|---|
| Product | Quart (c02e9fbb-4162-5ff2-be68-43b0818e4a75) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | python |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/pallets/quart |
purl2cpe | 2026-06-01 10:13:14.852005 |
pkg:pypi/quart |
purl2cpe | 2026-06-01 10:13:14.852007 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-49767 |
vulnerable | 2026-06-08 06:50:14.650626 |
Werkzeug possible resource exhaustion when parsing file data in forms
Werkzeug is a Web Server Gateway Interface web application library. Applications using `werkzeug.formparser.MultiPartParser` corresponding to a version of Werkzeug prior to 3.0.6 to parse `multipart/form-data` requests (e.g. all flask applications) are vulnerable to a relatively simple but effective resource exhaustion (denial of service) attack. A specifically crafted form submission request can cause the parser to allocate and block 3 to 8 times the upload size in main memory. There is no upper limit; a single upload at 1 Gbit/s can exhaust 32 GB of RAM in less than 60 seconds. Werkzeug version 3.0.6 fixes this issue.
Published: 2024-10-25T19:41:35.029Z
Updated: 2026-05-20T22:24:47.608Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.