{"action":"Upgrade werkzeug to 2.3.8 or later.","affected":[{"fixed":"3.0.1","introduced":"3.0.0"},{"fixed":"2.3.8","introduced":"2.0.0rc1"}],"component":"werkzeug","cve_ids":["CVE-2023-46136"],"ecosystem":"PyPI","epss":0.01288,"exploited":false,"fixed_versions":["3.0.1","2.3.8"],"ghsa_id":"GHSA-hrfv-mqp8-q5rw","id":"tcs_01M5KFMBM4FXCVTGGRM7JTVY57","modified_at":"2026-09-10T03:50:03.799599710Z","published_at":"2023-10-25T14:22:59Z","references":["https://osv.dev/vulnerability/GHSA-hrfv-mqp8-q5rw","https://github.com/pallets/werkzeug/security/advisories/GHSA-hrfv-mqp8-q5rw","https://nvd.nist.gov/vuln/detail/CVE-2023-46136","https://github.com/pallets/werkzeug/commit/b1916c0c083e0be1c9d887ee2f3d696922bfc5c1","https://github.com/pallets/werkzeug/commit/cbb446fdcada7685fce936ded01b76c08dbd6eb5","https://github.com/pallets/werkzeug/commit/f2300208d5e2a5076cbbb4c2aad71096fd040ef9","https://github.com/pallets/werkzeug/commit/f3c803b3ade485a45f12b6d6617595350c0f03e2","https://github.com/pallets/werkzeug","https://github.com/pypa/advisory-database/tree/main/vulns/werkzeug/PYSEC-2023-221.yaml","https://security.netapp.com/advisory/ntap-20231124-0008"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GHSA-hrfv-mqp8-q5rw","url":"https://osv.dev/vulnerability/GHSA-hrfv-mqp8-q5rw"}],"summary":"Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning"}