{"action":"Upgrade waitress to 2.1.1 or later.","affected":[{"fixed":"2.1.1","introduced":"0"}],"component":"waitress","cve_ids":["CVE-2022-24761"],"ecosystem":"PyPI","epss":0.0178,"exploited":false,"fixed_versions":["2.1.1"],"ghsa_id":"GHSA-4f7p-27jc-3c36","id":"tcs_01M5KEXYWGWAPTKZZGXA3V22KJ","modified_at":"2024-11-19T16:22:31.940218Z","published_at":"2022-03-18T19:00:59Z","references":["https://osv.dev/vulnerability/GHSA-4f7p-27jc-3c36","https://github.com/Pylons/waitress/security/advisories/GHSA-4f7p-27jc-3c36","https://nvd.nist.gov/vuln/detail/CVE-2022-24761","https://github.com/Pylons/waitress/commit/9e0b8c801e4d505c2ffc91b891af4ba48af715e0","https://github.com/Pylons/waitress","https://github.com/Pylons/waitress/releases/tag/v2.1.1","https://github.com/pypa/advisory-database/tree/main/vulns/waitress/PYSEC-2022-169.yaml","https://lists.debian.org/debian-lts-announce/2022/05/msg00011.html","https://www.debian.org/security/2022/dsa-5138"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-4f7p-27jc-3c36","url":"https://osv.dev/vulnerability/GHSA-4f7p-27jc-3c36"}],"summary":"HTTP Request Smuggling in waitress"}