—PyPI
PYSEC-2019-136· CVE-2019-16785, GHSA-pg36-wpm5-g57pModified: 11/8/2023
package
PyPI/waitress
pkg:pypi/waitress
—PyPI
PYSEC-2019-137· CVE-2019-16786, GHSA-g2xc-35jw-c63pModified: 11/8/2023
—PyPI
PYSEC-2019-138· CVE-2019-16789, GHSA-968f-66r5-5v74Modified: 11/8/2023
—PyPI
PYSEC-2020-155· CVE-2020-5236, GHSA-73m2-3pwg-5fgcModified: 11/8/2023
—PyPI
PYSEC-2020-178· CVE-2019-16792, GHSA-4ppp-gpcr-7qf6Modified: 11/8/2023
—PyPI
PYSEC-2022-169· CVE-2022-24761, GHSA-4f7p-27jc-3c36Modified: 11/8/2023
—PyPI
PYSEC-2022-205· CVE-2022-31015, GHSA-f5x9-8jwc-25rwModified: 11/8/2023
MEDIUM4.8PyPI
PYSEC-2024-210· CVE-2024-49768, GHSA-9298-4cf8-g4wjModified: 1/19/2025
HIGH7.5PyPI
PYSEC-2024-211· CVE-2024-49769, GHSA-3f84-rpwh-47g6Modified: 1/19/2025
HIGH7.5PyPI
GHSA-3f84-rpwh-47g6· CVE-2024-49769, PYSEC-2024-211Waitress vulnerable to DoS leading to high CPU usage/resource exhaustion
Modified: 1/21/2025
HIGH7.5PyPI
GHSA-4f7p-27jc-3c36· CVE-2022-24761, PYSEC-2022-169HTTP Request Smuggling in waitress
Modified: 11/19/2024
CRITICALPyPI
GHSA-4ppp-gpcr-7qf6· CVE-2019-16792, GHSA-j7j6-7hfx-5522HTTP Request Smuggling: Content-Length Sent Twice in Waitress
Modified: 7/8/2026
MEDIUM5.7PyPI
GHSA-73m2-3pwg-5fgc· CVE-2020-5236, PYSEC-2020-155Catastrophic backtracking in regex allows Denial of Service in Waitress
Modified: 9/10/2026
CRITICAL9.1PyPI
GHSA-9298-4cf8-g4wj· CVE-2024-49768, PYSEC-2024-210Waitress has request processing race condition in HTTP pipelining with invalid first request
Modified: 1/21/2025
HIGH7.1PyPI
GHSA-968f-66r5-5v74· CVE-2019-16789, PYSEC-2019-138HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers (Follow-up)
Modified: 11/19/2024
MEDIUM6.5PyPI
GHSA-f5x9-8jwc-25rw· CVE-2022-31015, PYSEC-2022-205Uncaught Exception (due to a data race) leads to process termination in Waitress
Modified: 11/19/2024
HIGH7.1PyPI
GHSA-g2xc-35jw-c63p· CVE-2019-16786, PYSEC-2019-137HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress
Modified: 7/8/2026
HIGHPyPI
GHSA-m5ff-3wj3-8ph4HTTP Request Smuggling: Invalid whitespace characters in headers in Waitress
Modified: 2/17/2025
HIGH7.1PyPI
GHSA-pg36-wpm5-g57p· CVE-2019-16785, PYSEC-2019-136HTTP Request Smuggling: LF vs CRLF handling in Waitress
Modified: 9/10/2026