CVE-2026-102598
2 advisories.
PyPI/werkzeug CVE-2026-102598: medium
Werkzeug safe_join() allows Windows special device names
Action: Upgrade werkzeug to 3.1.9 or later.
pip install werkzeug==3.1.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.9 | - |
Fixed versions
| 3.1.9 |
Sources
- osv: GHSA-g6x2-hccm-hh4m
- https://github.com/pallets/werkzeug/security/advisories/GHSA-g6x2-hccm-hh4m
- https://nvd.nist.gov/vuln/detail/CVE-2026-102598
- https://github.com/pallets/werkzeug/pull/3309
- https://github.com/pallets/werkzeug/commit/8d77320bcdf3a34941ec06dcf16b03c065cd21b6
- https://github.com/pallets/werkzeug
- https://github.com/pallets/werkzeug/releases/tag/3.1.9
CVE-2026-102598 · published · modified · JSON
PyPI/werkzeug CVE-2026-102598: unknown
Werkzeug safe_join() allows Windows special device names
Action: Upgrade werkzeug to 3.1.9 or later.
pip install werkzeug==3.1.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.9 | - |
Fixed versions
| 3.1.9 |
Sources
- osv: PYSEC-2026-4312
- https://github.com/pallets/werkzeug/security/advisories/GHSA-g6x2-hccm-hh4m
- https://nvd.nist.gov/vuln/detail/CVE-2026-102598
- https://github.com/pallets/werkzeug/pull/3309
- https://github.com/pallets/werkzeug/commit/8d77320bcdf3a34941ec06dcf16b03c065cd21b6
- https://github.com/pallets/werkzeug
- https://github.com/pallets/werkzeug/releases/tag/3.1.9
- https://pypi.org/project/werkzeug
- https://github.com/advisories/GHSA-g6x2-hccm-hh4m
CVE-2026-102598 · published · modified · JSON