{"action":"Upgrade gunicorn to 22.0.0 or later.","affected":[{"fixed":"22.0.0","introduced":"0"}],"component":"gunicorn","cve_ids":["CVE-2024-1135"],"ecosystem":"PyPI","epss":0.02996,"exploited":false,"fixed_versions":["22.0.0"],"ghsa_id":"GHSA-w3h3-4rj7-4ph4","id":"tcs_01M5KG19Z6XZCSZW8XAP5GW73T","modified_at":"2026-09-10T03:50:00.309108086Z","published_at":"2024-04-16T00:30:32Z","references":["https://osv.dev/vulnerability/GHSA-w3h3-4rj7-4ph4","https://nvd.nist.gov/vuln/detail/CVE-2024-1135","https://github.com/benoitc/gunicorn/issues/3091","https://github.com/benoitc/gunicorn/pull/3113","https://github.com/benoitc/gunicorn/commit/ac29c9b0a758d21f1e0fb3b3457239e523fa9f1d","https://github.com/benoitc/gunicorn","https://github.com/benoitc/gunicorn/releases/tag/22.0.0","https://huntr.com/bounties/22158e34-cfd5-41ad-97e0-a780773d96c1","https://lists.debian.org/debian-lts-announce/2024/06/msg00027.html","https://lists.debian.org/debian-lts-announce/2024/12/msg00018.html"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-w3h3-4rj7-4ph4","url":"https://osv.dev/vulnerability/GHSA-w3h3-4rj7-4ph4"}],"summary":"Request smuggling leading to endpoint restriction bypass in Gunicorn"}