WerkGhost

WerkGhost Exploit for Werkzeug -p -d --timeout -t Example python werkghost.py -u http://127.0.0.1:8000 -p CON -d download --timeout 3 -t 100 Note : The target web server must be running on Windows. If the operation fails or produces inconsistent results, increase the number of worker threads and...

CLEANSTART-2026-EI28722 Security fix for CVE-2025-66221 applied in: airflow-3 3.1.8-r0, airflow-3 3.2.0-r0

CVE-2025-66221 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

dbmsbenchmarker (>=0.13.0, <=0.13.1), fittrackee (>=0.6.11, <=0.7.6) +2 more potentially affected by CVE-2025-66221 via werkzeug (2.1.0)

werkzeug PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - dbmsbenchmarker =0.13.0, =0.6.11, =0.15.0, =10.10.10, =10.14.0 Source cves: CVE-2025-66221 Source advisory: OSV:PYSEC-2026-2046...

autorad (>=0.1.2, <=0.2.5), aws-flask-lambda (>=0.1.0, <=0.1.2) +54 more potentially affected by CVE-2025-66221 via werkzeug (2.0.2)

werkzeug PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - autorad =0.1.2, =0.1.0, =0.0.1, =0.9.2, =0.0.1, =0.1.0, =0.4.9, =3.1.141, =0.8.0.dev6, =1.0.0, =1.0.0, =0.16.0, =0.1.0, =1.0.0 and more Source...

activedirectoryenum (>=0.4.0, <=0.4.6), airiam (>=0.1.2, <=0.1.8) +29 more potentially affected by CVE-2025-66221 via werkzeug (1.0.0)

werkzeug PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - activedirectoryenum =0.4.0, =0.1.2, =0.3.0, =0.0.3, =1.3.0, =1.0.0, =1.0.1, =0.8.0, =0.1.1, =1.0.0, =2.0.0b4, =2.1.0b1 - ors3handler 0.0.31 and...

aprsd (>=2.3.0, <=2.5.9), cacaodocs (>=0.1.3, <=0.1.14) +19 more potentially affected by CVE-2025-66221 via werkzeug (2.0.0)

werkzeug PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - aprsd =2.3.0, =0.1.3, =1.9.4rc2, =0.1.1, =1.5.3, =0.12.0, =1.0.0, =2.9.1, =0.28.1, =1.0.0, =0.3.0.0, =4.2.11.10, =4.2.11.11 - quickboard 0.1.1 a...

ablog (>=0.10.3, <=0.10.7), acumos (>=0.9.3, <=0.9.4) +13 more potentially affected by CVE-2025-66221 via werkzeug (1.0.0rc1)

werkzeug PYPI version 1.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - ablog =0.10.3, =0.9.3, =0.7.0rc0, =0.26.0, =0.26.0, =5.0.19, =0.2.11, =0.51.0, =0.51.6, =0.52.0, =0.52.0, =0.53.0, =0.53.4 Source cves:...

a2grunnerp (>=0.1.0, <=0.1.8), agentuniverse (>=0.0.6.dev1, <=0.0.7) +142 more potentially affected by CVE-2025-66221 via werkzeug (2.2.2)

werkzeug PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - a2grunnerp =0.1.0, =0.0.6.dev1, =0.3.0rc5, =0.10.0, =2022.8.1, =0.1.0, =7.0.1, =0.0.2, =1.0.0, =1.0.2 - dareyou 1.0.0 and more Source cves:...

abstra (>=1.8.8, <=2.5.1), acceldata-o2a (1.0.0) +241 more potentially affected by CVE-2025-66221 via werkzeug (2.2.3)

werkzeug PYPI version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - abstra =1.8.8, =0.2.1, =1.1.0rc2, =0.0.1, =0.1.1, =0.0.4, =0.0.1, =2023.8.1.11, =0.58.0, =2.7.3rc1, =1.0.0rc1, =1.6.0b1 and more Source cves:...

mettle (>=0.7.12, <=0.7.14) potentially affected by CVE-2025-66221 via werkzeug (0.10.1)

werkzeug PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - mettle =0.7.12, =0.7.14 Source cves: CVE-2025-66221 Source advisory: OSV:PYSEC-2026-2046...

discourse-sso-oidc-bridge-consideratio (>=0.1.8, <=0.1.9), enochecker (0.0.5) +7 more potentially affected by CVE-2025-66221 via werkzeug (0.15.2)

werkzeug PYPI version 0.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - discourse-sso-oidc-bridge-consideratio =0.1.8, =0.0.2, =1.0.22, =1.0.28.3 Source cves: CVE-2025-66221 Source advisory: OSV:PYSEC-2026-2046...

animo-trainer (1.0.2), ankml (>=1.0.1, <=1.0.7) +31 more potentially affected by CVE-2025-66221 via werkzeug (2.3.7)

werkzeug PYPI version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - animo-trainer 1.0.2 - ankml =1.0.1, =0.9.5, =3.2.0, =1.0.5, =0.2.18, =1.0.0, =0.1.0, =2.0.0, =1.0.1, =1.0.4 and more Source cves: CVE-2025-66221...

edisgo (0.2.0), opencv-browser-camera (>=0.1.0, <=0.1.2) potentially affected by CVE-2025-66221 via werkzeug (2.2.0)

werkzeug PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - edisgo 0.2.0 - opencv-browser-camera =0.1.0, =0.1.2 Source cves: CVE-2025-66221 Source advisory: OSV:PYSEC-2026-2046...

agent-manager-sdk (>=0.1.1, <=0.1.2), aipack (>=0.0.1, <=0.0.5) +42 more potentially affected by CVE-2025-66221 via werkzeug (2.0.1)

werkzeug PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - agent-manager-sdk =0.1.1, =0.0.1, =1.0.1, =0.5.5, =0.0.3, =0.2.1, =1.0.0.dev1, =1.5.0rc4, =1.1.4, =0.2.1, =0.2.4 - face-preprocessor 0.0.1 - fam...

Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by improper handling of Windows device names due to Werkzeug

Summary Werkzeug is used by IBM Cloud Pak for Data System 1.0 as a WSGI web application library. CVE-2025-66221 affects Werkzeug's handling of Windows device names, which could lead to improper resource handling and potential availability impact on Windows systems. This vulnerability relates to t...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to improper name handling in Werkzeug [ CVE-2025-66221]

Summary IBM Watson Speech Services Cartridge is vulnerable to improper name handling in Werkzeug, caused by a reading issue with Werkzeug's safejoin function that allows path segments with special device names to hang indefinately CVE-2025-66221. Werkzeug is used in our service runtimes. This...

abilian-sbe (>=1.1.0, <=1.1.12), acfx (>=0.3.1, <=0.3.7.dev2) +720 more potentially affected by CVE-2025-66221 +1 more via werkzeug (>=3.0.0, <=3.1.5)

werkzeug PYPI version =3.0.0, =1.1.0, =0.3.1, =4.11.0, =1.0.0, =0.1.3, =0.2.4.1, =0.0.1, =1.3.0, =0.1.0, =0.1.1, =0.5.7, =0.1.0, =0.1.0, =0.1.10 and more Source cves: CVE-2025-66221, CVE-2026-27199 Source advisory: SNYK:PYTHON-WERKZEUG-15322677...

Security Bulletin: There is a vulnerability in werkzeug-3.1.3-py3-none-any.whl used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2025-66221)

Summary There is a vulnerability in werkzeug-3.1.3-py3-none-any.whl used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2025-66221 DESCRIPTION: Werkzeug is a comprehensive WSGI web application library. Prior to version 3.1.4, Werkzeug's safejoin...

CVE-2025-66221

A flaw was found in Werkzeug. This vulnerability allows a denial of service via path segments with Windows device names. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and...

a4t-sale-discount (5.0.2), acumos (0.9.2) +413 more potentially affected by CVE-2025-66221 via werkzeug (0.16.1)

werkzeug PYPI version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - a4t-sale-discount 5.0.2 - acumos 0.9.2 - airflow-aggua-plugin =1.0.7, =0.5.6, =0.1.0, =0.0.7, =0.0.1, =0.1.6, =0.0.2, =1.0.0, =4.0.0, =1.3.0,...