EUVD-2025-6969

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Gunicorn 21.2.0 lacks proper validation of 'Transfer-Encoding' header, risking multiple security issues.

Reporter	Title	Published	Views	Family All 46
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rapid Infrastructure Automation	28 May 202514:39	–	ibm
IBM Security Bulletins	Security Bulletin: A denial-of-service attack, TE.CL request smuggling, a man-in-the-middle attack, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	16 Apr 202516:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to gunicorn-22.0.0-py3-none-any.whl CVE-2024-6827	14 May 202512:08	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion HCI and IBM Fusion HCI for watsonx	31 May 202514:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.0.1	11 Apr 202514:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Business Automation Workflow Machine Learning Server are addressed with 24.0.0-IF006	6 Aug 202515:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in gunicorn affects IBM Cloud Pak for Data System 1.0(CPDS 1.0)[CVE-2024-6827].	5 May 202518:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to gunicorn-22.0.0-py3-none-any.whl CVE-2024-6827	13 May 202507:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Network Threat Analytics app for IBM QRadar SIEM includes components with known vulnerabilities	22 Jul 202515:48	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion	31 May 202514:06	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "89459695-f7e3-3f5e-9f8d-978d33948bfb",
        "vendor": {
          "name": "benoitc"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "06c4ef3a-62e5-3b34-b1ec-cb839609341c",
        "product": {
          "name": "benoitc/gunicorn"
        },
        "product_version": "unspecified ≤latest"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-6827
huntr	www.huntr.com/bounties/1b4f8f38-39da-44b6-9f98-f618639d0dd7
github	www.github.com/benoitc/gunicorn/issues/3278
github	www.github.com/benoitc/gunicorn/issues/3087
github	www.github.com/benoitc/gunicorn/pull/3113
github	www.github.com/benoitc/gunicorn/releases/tag/22.0.0

03 Oct 2025 20:07Current

7.6High risk

Vulners AI Score7.6

CVSS 37.5

EPSS0.00029

SSVC