CVE-2023-46136

Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk b...

PT-2019-20112

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue allows for the injection of email headers using CR or LF characters. This can lead to header injection attacks. The fix involves disallowing CR a...