Headline
GHSA-xhp9-4947-rq78: Denial of service in bottle
Bottle before 0.12.20 mishandles errors during early request binding.
- GitHub Advisory Database
- GitHub Reviewed
- CVE-2022-31799
Denial of service in bottle
Moderate severity GitHub Reviewed Published Jun 3, 2022 • Updated Jun 3, 2022
We are still processing this advisory. You may have affected repositories that are not yet on this list. Check back soon for more.
Package
pip bottle (pip )
Affected versions
< 0.12.20
Description
Related news
Ubuntu Security Notice USN-5532-1
Ubuntu Security Notice 5532-1 - It was discovered that Bottle incorrectly handled errors during early request binding. An attacker could possibly use this issue to disclose sensitive information.
CVE-2022-31799: Comparing 0.12.19...0.12.20 · bottlepy/bottle
Bottle before 0.12.20 mishandles errors during early request binding.