344 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-gunicorn (UTSA-2026-142338)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142338 advisory. Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-gunicorn (UTSA-2026-142339)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142339 advisory. Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling HRS vulnerabilities. By crafting requests with conflicting...
Tandoor Recipes: Resource Management Error Vulnerability
Tandoor Recipes versions prior to 2.6.10 have a resource management vulnerability. This vulnerability arises from the use of Python’s re.sub function to execute user-controllable Automation regular expressions. There is a lack of complexity validation during execution, and execution times may...
OESA-2026-3724 python-gunicorn security update
GunicornGreen Unicorn is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy. Security Fixes: Gunicorn...
Astra Linux – Vulnerability in Gunicorn
Gunicorn version 21.2.0 does not properly validate the value of the ‘Transfer-Encoding’ header as specified in the RFC standards. This results in the use of the default fallback method ‘Content-Length’, making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisonin...
Astra Linux – Vulnerability in Gunicorn
Gunicorn fails to properly validate Transfer-Encoding headers, resulting in HTTP Request Smuggling HRS vulnerabilities. By creating requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue arises due to Gunicorn’s...
OESA-2026-3660 python-gunicorn security update
GunicornGreen Unicorn is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy. Security Fixes: Gunicorn...
OESA-2026-3659 python-gunicorn security update
GunicornGreen Unicorn is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy. Security Fixes: Gunicorn fail...
OESA-2026-3657 python-gunicorn security update
GunicornGreen Unicorn is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy. Security Fixes: Gunicorn...
OESA-2026-3658 python-gunicorn security update
GunicornGreen Unicorn is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy. Security Fixes: Gunicorn fail...
CVE-2026-78551 RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts
RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to enumerate valid usernames, perform unrestricted password-guessing attacks, and potentially exhaust application worker resources. For local authentication, the login implementati...
CVE-2026-78551
RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to enumerate valid usernames, perform unrestricted password-guessing attacks, and potentially exhaust application worker resources. For local authentication, the login implementati...
PT-2026-81013
Name of the Vulnerable Software and Affected Versions RansomLook affected versions not specified Description Weaknesses in the authentication endpoint allow an unauthenticated remote attacker to enumerate valid usernames, perform unrestricted password-guessing attacks, and potentially cause a...
CLSA-2026-1787306646 TuxCare security update for gunicorn (1 CVE)
TuxCare rebuilt gunicorn to address 1 CVE. Fixed in 20.0.4.post3+tuxcare...
PT-2026-83907
TuxCare rebuilt gunicorn to address 1 CVE. Fixed in 20.0.4.post3+tuxcare...
CLSA-2026-1782694759 TuxCare security update for gunicorn (1 CVE)
TuxCare rebuilt gunicorn to address 1 CVE. Fixed in 23.0.0.post1+tuxcare...
CLSA-2026-1782694758 TuxCare security update for gunicorn (1 CVE)
TuxCare rebuilt gunicorn to address 1 CVE. Fixed in 20.1.0.post3+tuxcare...
CLSA-2026-1772496718 TuxCare security update for gunicorn (1 CVE)
TuxCare rebuilt gunicorn to address 1 CVE. Fixed in 20.0.4.post2+tuxcare...