Executive brief
HTTP Request Smuggling: Invalid whitespace characters in headers in Waitress
Affected products
- PyPI waitress
Junglewise Threat Intelligence
HTTP Request Smuggling: Invalid whitespace characters in headers in Waitress
Severity: info ยท Published 2019-12-26
Technologies: waitress (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2024-211 - Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the
- PYSEC-2024-210 - Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may send a request that is exactly recv_bytes (default
- PYSEC-2022-205 - Waitress is a Web Server Gateway Interface server for Python 2 and 3. Waitress versions 2.1.0 and 2.1.1 may terminate early due to a thread
- PYSEC-2022-169 - Waitress is a Web Server Gateway Interface server for Python 2 and 3. When using Waitress versions 2.1.0 and prior behind a proxy that does
- PYSEC-2020-155 - Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a header like "Bad-header