~ / search / GHSA-j544-7q9p-6xp8

GHSA-j544-7q9p-6xp8

Pallets Werkzeug vulnerable to Path Traversal

Source: GitHub Advisory Database (reviewed) High CVE-2019-14322

Packages

EcosystemPackageAffectedFixed in
PyPI werkzeug < 0.15.5 0.15.5

Details

As written in the advisory (Markdown source, shown as plain text).

In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.

References

External links from the advisory. They lead to third-party sites.