Debian/gunicorn: high 7.5
Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making
Action: Upgrade gunicorn to 23.0.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 23.0.0-1 | - |
Fixed versions
| 23.0.0-1 |
Sources
- osv: DEBIAN-CVE-2024-6827#Debian:13/gunicorn
- https://security-tracker.debian.org/tracker/CVE-2024-6827
published · modified · JSON