{"action":"Upgrade waitress to 3.0.1 or later.","affected":[{"fixed":"3.0.1","introduced":"2.0.0"}],"component":"waitress","cve_ids":["CVE-2024-49768"],"ecosystem":"PyPI","epss":0.00486,"exploited":false,"fixed_versions":["3.0.1"],"ghsa_id":"GHSA-9298-4cf8-g4wj","id":"tcs_01M5KF9GMNEZD1SZHB9R3DHGHY","modified_at":"2025-01-21T18:22:46.807383Z","published_at":"2024-10-29T14:45:03Z","references":["https://osv.dev/vulnerability/GHSA-9298-4cf8-g4wj","https://github.com/Pylons/waitress/security/advisories/GHSA-9298-4cf8-g4wj","https://nvd.nist.gov/vuln/detail/CVE-2024-49768","https://github.com/Pylons/waitress/commit/e4359018537af376cf24bd13616d861e2fb76f65","https://github.com/Pylons/waitress","https://github.com/pypa/advisory-database/tree/main/vulns/waitress/PYSEC-2024-210.yaml"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-9298-4cf8-g4wj","url":"https://osv.dev/vulnerability/GHSA-9298-4cf8-g4wj"}],"summary":"Waitress has request processing race condition in HTTP pipelining with invalid first request"}