243 matches found
OESA-2026-3724 python-gunicorn security update
GunicornGreen Unicorn is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy. Security Fixes: Gunicorn...
Astra Linux – Vulnerability in Gunicorn
Gunicorn fails to properly validate Transfer-Encoding headers, resulting in HTTP Request Smuggling HRS vulnerabilities. By creating requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue arises due to Gunicorn’s...
Astra Linux – Vulnerability in Gunicorn
Gunicorn version 21.2.0 does not properly validate the value of the ‘Transfer-Encoding’ header as specified in the RFC standards. This results in the use of the default fallback method ‘Content-Length’, making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisonin...
OESA-2026-3660 python-gunicorn security update
GunicornGreen Unicorn is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy. Security Fixes: Gunicorn...
OESA-2026-3659 python-gunicorn security update
GunicornGreen Unicorn is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy. Security Fixes: Gunicorn fail...
OESA-2026-3657 python-gunicorn security update
GunicornGreen Unicorn is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy. Security Fixes: Gunicorn...
OESA-2026-3658 python-gunicorn security update
GunicornGreen Unicorn is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy. Security Fixes: Gunicorn fail...
CVE-2026-78551 RansomLook Login Endpoint Allows Timing-Based Username Enumeration and Unthrottled Authentication Attempts
RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to enumerate valid usernames, perform unrestricted password-guessing attacks, and potentially exhaust application worker resources. For local authentication, the login implementati...
CVE-2026-78551
RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to enumerate valid usernames, perform unrestricted password-guessing attacks, and potentially exhaust application worker resources. For local authentication, the login implementati...
PT-2026-81013
RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to enumerate valid usernames, perform unrestricted password-guessing attacks, and potentially exhaust application worker resources. For local authentication, the login implementati...
CLSA-2026-1787306646 TuxCare security update for gunicorn (1 CVE)
TuxCare rebuilt gunicorn to address 1 CVE. Fixed in 20.0.4.post3+tuxcare...
PT-2026-83907
TuxCare rebuilt gunicorn to address 1 CVE. Fixed in 20.0.4.post3+tuxcare...
CLSA-2026-1782694758 TuxCare security update for gunicorn (1 CVE)
TuxCare rebuilt gunicorn to address 1 CVE. Fixed in 20.1.0.post3+tuxcare...
CLSA-2026-1782694759 TuxCare security update for gunicorn (1 CVE)
TuxCare rebuilt gunicorn to address 1 CVE. Fixed in 23.0.0.post1+tuxcare...
CLSA-2026-1772496721 TuxCare security update for gunicorn (3 CVEs)
TuxCare rebuilt gunicorn to address 3 CVEs. Fixed in 21.2.0.post2+tuxcare...
CLSA-2026-1772496723 TuxCare security update for gunicorn (2 CVEs)
TuxCare rebuilt gunicorn to address 2 CVEs. Fixed in 22.0.0.post1+tuxcare...
CLSA-2026-1772496719 TuxCare security update for gunicorn (3 CVEs)
TuxCare rebuilt gunicorn to address 3 CVEs. Fixed in 20.1.0.post1+tuxcare...
CLSA-2026-1772496718 TuxCare security update for gunicorn (1 CVE)
TuxCare rebuilt gunicorn to address 1 CVE. Fixed in 20.0.4.post2+tuxcare...