ROOT-APP-PYPI-CVE-2024-34069 CVE-2024-34069 in Werkzeug - Patched by Root

Root has patched CVE-2024-34069 in the Werkzeug package for Root:PyPI. Multiple fixed versions available...

biuletyn-bip (>=0.6.2, <=0.7.1), dallinger (>=7.4.0, <=8.1.0) +188 more potentially affected by CVE-2024-34069 via werkzeug (2.0.0rc5)

werkzeug PYPI version 2.0.0rc5 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - biuletyn-bip =0.6.2, =7.4.0, =2.1.2, =0.0.3, =0.0.4, =5.6.0, =5.2.0, =5.2.21, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =6.0.5 and more Source...

agent-manager-sdk (>=0.1.1, <=0.1.2), aipack (>=0.0.1, <=0.0.5) +42 more potentially affected by CVE-2024-34069 via werkzeug (2.0.1)

werkzeug PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - agent-manager-sdk =0.1.1, =0.0.1, =1.0.1, =0.5.5, =0.0.3, =0.2.1, =1.0.0.dev1, =1.5.0rc4, =1.1.4, =0.2.1, =0.2.4 - face-preprocessor 0.0.1 - fam...

animo-trainer (1.0.2), ankml (>=1.0.1, <=1.0.7) +31 more potentially affected by CVE-2024-34069 via werkzeug (2.3.7)

werkzeug PYPI version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - animo-trainer 1.0.2 - ankml =1.0.1, =0.9.5, =3.2.0, =1.0.5, =0.2.18, =1.0.0, =0.1.0, =2.0.0, =1.0.1, =1.0.4 and more Source cves: CVE-2024-34069...

apilogicserver (>=9.1.32, <=17.0.0), archivy (>=1.7.5, <=1.7.7) +14 more potentially affected by CVE-2024-34069 via werkzeug (2.3.3)

werkzeug PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - apilogicserver =9.1.32, =1.7.5, =0.1.0, =0.1.0, =0.2.0, =0.1.6, =0.1.0, =0.9.0, =1.0.5, =0.8.0, =2.9.0, =0.7.1.dev0, =1.0.5, =0.1.0, =0.4.0 and...

adfotg (0.4.0), aihqrating (>=0.0.3, <=0.0.7) +311 more potentially affected by CVE-2024-34069 via werkzeug (2.3.8)

werkzeug PYPI version 2.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - adfotg 0.4.0 - aihqrating =0.0.3, =1.1.9, =0.56.0, =0.9.9, =1.0.0, =0.3.18, =3.0.0, =3.2.2, =1.1.0, =0.1.0, =0.20.0 and more Source cves:...

amundsen-metadata (>=1.0.18, <=2.5.4), amundsen-search (>=2.4.1, <=2.5.1) +8 more potentially affected by CVE-2024-34069 via werkzeug (0.15.3)

werkzeug PYPI version 0.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - amundsen-metadata =1.0.18, =2.4.1, =0.0.1, =0.0.6, =0.9.94, =0.0.1, =0.0.1, =0.0.1, =0.1.2 Source cves: CVE-2024-34069 Source advisory:...

autorad (>=0.1.2, <=0.2.5), aws-flask-lambda (>=0.1.0, <=0.1.2) +54 more potentially affected by CVE-2024-34069 via werkzeug (2.0.2)

werkzeug PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - autorad =0.1.2, =0.1.0, =0.0.1, =0.9.2, =0.0.1, =0.1.0, =0.4.9, =3.1.141, =0.8.0.dev6, =1.0.0, =1.0.0, =0.16.0, =0.1.0, =1.0.0 and more Source...

ablog (>=0.10.3, <=0.10.7), acumos (>=0.9.3, <=0.9.4) +13 more potentially affected by CVE-2024-34069 via werkzeug (1.0.0rc1)

werkzeug PYPI version 1.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - ablog =0.10.3, =0.9.3, =0.7.0rc0, =0.26.0, =0.26.0, =5.0.19, =0.2.11, =0.51.0, =0.51.6, =0.52.0, =0.52.0, =0.53.0, =0.53.4 Source cves:...

drmlapp (1.0.6), python-webex-bot (0.51.0) potentially affected by CVE-2024-34069 via werkzeug (0.15.1)

werkzeug PYPI version 0.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - drmlapp 1.0.6 - python-webex-bot 0.51.0 Source cves: CVE-2024-34069 Source advisory: OSV:PYSEC-2026-2043...

actinia-core (>=4.9.1, <=4.10.0), adeso (>=0.0.1, <=0.0.4) +27 more potentially affected by CVE-2024-34069 via werkzeug (2.3.6)

werkzeug PYPI version 2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - actinia-core =4.9.1, =0.0.1, =0.1.23, =0.6.14, =1.0.1, =1.0.0, =1.1.0, =2024.1.1, =0.0.1, =0.0.1, =0.0.25, =0.2.27 - fortigate-vpn-login 0.5.0 a...

mettle (>=0.7.12, <=0.7.14) potentially affected by CVE-2024-34069 via werkzeug (0.10.1)

werkzeug PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - mettle =0.7.12, =0.7.14 Source cves: CVE-2024-34069 Source advisory: OSV:PYSEC-2026-2043...

edisgo (0.2.0), opencv-browser-camera (>=0.1.0, <=0.1.2) potentially affected by CVE-2024-34069 via werkzeug (2.2.0)

werkzeug PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - edisgo 0.2.0 - opencv-browser-camera =0.1.0, =0.1.2 Source cves: CVE-2024-34069 Source advisory: OSV:PYSEC-2026-2043...

flask-autocrud (2.1.0), miscan (1.1.1) potentially affected by CVE-2024-34069 via werkzeug (0.15.0)

werkzeug PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - flask-autocrud 2.1.0 - miscan 1.1.1 Source cves: CVE-2024-34069 Source advisory: OSV:PYSEC-2026-2043...

puppetboard (0.2.2), talisker (>=0.4.0, <=0.4.1) potentially affected by CVE-2024-34069 via werkzeug (0.11.5)

werkzeug PYPI version 0.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - puppetboard 0.2.2 - talisker =0.4.0, =0.4.1 Source cves: CVE-2024-34069 Source advisory: OSV:PYSEC-2026-2043...

OESA-2025-1998 python-werkzeug security update

A comprehensive WSGI web application library Security Fixes: Werkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal...

Security Bulletin: IBM Storage Ceph is vulnerable to CSRF in Werkzeug (CVE-2024-34069)

Summary Werkzeug is used by IBM Storage Ceph for the Web Server Interface. CVE-2024-34069 This bulletin identifies the steps to take to address the vulnerability in IBM Storage Ceph. Vulnerability Details CVEID:CVE-2024-34069 DESCRIPTION: Werkzeug is a comprehensive WSGI web application library...

NewStart CGSL MAIN 7.02 : python-werkzeug Vulnerability (NS-SA-2025-0136)

The remote NewStart CGSL host, running version MAIN 7.02, has python-werkzeug packages installed that are affected by a vulnerability: - Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to to Cross-Site Request Forgery (CSRF) due to insecure debugger access in Werkzeug ( CVE-2024-34069)

Summary Potential vulnerabilities in Werkzeug has been identified that may affect IBM Cloud Pak for Data. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-34069 DESCRIPTION: Werkzeug is a comprehensive WSGI web application library. The debugger in affected version...

Debian: Security Advisory (DLA-4062-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...