{"action":"Upgrade waitress to 1.4.1 or later.","affected":[{"fixed":"1.4.1","introduced":"0"}],"component":"waitress","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["1.4.1"],"ghsa_id":"GHSA-m5ff-3wj3-8ph4","id":"tcs_01M5KFQ9XV451FXB6EW2QQR31Y","modified_at":"2025-02-17T05:27:24.012454Z","published_at":"2019-12-26T16:34:38Z","references":["https://osv.dev/vulnerability/GHSA-m5ff-3wj3-8ph4","https://github.com/Pylons/waitress/security/advisories/GHSA-m5ff-3wj3-8ph4","https://github.com/Pylons/waitress/commit/11d9e138125ad46e951027184b13242a3c1de017"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-m5ff-3wj3-8ph4","url":"https://osv.dev/vulnerability/GHSA-m5ff-3wj3-8ph4"}],"summary":"HTTP Request Smuggling: Invalid whitespace characters in headers in Waitress"}