EUVD-2019-0158

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Vulnerability in Waitress 1.4.0 allows HTTP request smuggling via invalid requests, fixed in 1.4.1.

Reporter	Title	Published	Views	Family All 93
AlpineLinux	CVE-2019-16789	26 Dec 201916:40	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в waitress	3 May 202623:59	–	astralinux
Circl	CVE-2019-16789	17 Mar 202411:41	–	circl
CNVD	Waitress Environment Issue Vulnerability	27 Dec 201900:00	–	cnvd
CVE	CVE-2019-16789	26 Dec 201916:40	–	cve
Cvelist	CVE-2019-16789 HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers	26 Dec 201916:40	–	cvelist
Debian	[SECURITY] [DLA 3000-1] waitress security update	12 May 202221:44	–	debian
Debian CVE	CVE-2019-16789	26 Dec 201916:40	–	debiancve
Tenable Nessus	Debian DLA-3000-1 : waitress - LTS security update	13 May 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : python-waitress (EulerOS-SA-2020-1879)	28 Aug 202000:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "ec24d3af-c254-3120-bcd0-c17de4650d98",
        "vendor": {
          "name": "Pylons"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "fb10ecaa-dac1-3a7e-9def-54fbdfc4b0e8",
        "product": {
          "name": "Waitress"
        },
        "product_version": "< 1.4.1 <1.4.1"
      }
    ]
  }
]

Source	Link
github	www.github.com/Pylons/waitress/commit/11d9e138125ad46e951027184b13242a3c1de017
github	www.github.com/github/advisory-review/pull/14604
docs	www.docs.pylonsproject.org/projects/waitress/en/latest/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/GVDHR2DNKCNQ7YQXISJ45NT4IQDX3LJ7/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/LYEOTGWJZVKPRXX2HBNVIYWCX73QYPM5/
access	www.access.redhat.com/errata/RHSA-2020:0720
github	www.github.com/advisories/GHSA-968f-66r5-5v74
github	www.github.com/Pylons/waitress/security/advisories/GHSA-968f-66r5-5v74
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-16789
github	www.github.com/Pylons/waitress/commit/ddb65b489d01d696afa1695b75fdd5df3e4ffdf8

07 Oct 2025 00:30Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.17.1 - 8.2

CVSS 26.4

EPSS0.00882