{"action":"Upgrade werkzeug to 2.2.3 or later.","affected":[{"fixed":"2.2.3","introduced":"0"}],"component":"werkzeug","cve_ids":["CVE-2023-23934"],"ecosystem":"PyPI","epss":0.00507,"exploited":false,"fixed_versions":["2.2.3"],"ghsa_id":"GHSA-px8h-6qxv-m22q","id":"tcs_01M5KFTYF2PJ0063KN2ZDTYP4Q","modified_at":"2026-09-10T03:50:07.890803222Z","published_at":"2023-02-15T15:37:03Z","references":["https://osv.dev/vulnerability/GHSA-px8h-6qxv-m22q","https://github.com/pallets/werkzeug/security/advisories/GHSA-px8h-6qxv-m22q","https://nvd.nist.gov/vuln/detail/CVE-2023-23934","https://github.com/pallets/werkzeug/commit/cf275f42acad1b5950c50ffe8ef58fe62cdce028","https://github.com/pallets/werkzeug","https://github.com/pallets/werkzeug/releases/tag/2.2.3","https://github.com/pypa/advisory-database/tree/main/vulns/werkzeug/PYSEC-2023-57.yaml","https://security.netapp.com/advisory/ntap-20230818-0003","https://www.debian.org/security/2023/dsa-5470"],"severity":{"label":"low","score":2.6},"sources":[{"source":"osv","source_id":"GHSA-px8h-6qxv-m22q","url":"https://osv.dev/vulnerability/GHSA-px8h-6qxv-m22q"}],"summary":"Incorrect parsing of nameless cookies leads to __Host- cookies bypass"}