{"action":"Upgrade werkzeug to 2.1.1 or later.","affected":[{"fixed":"2.1.1","introduced":"0"}],"component":"werkzeug","cve_ids":["CVE-2022-29361"],"ecosystem":"PyPI","epss":0.08067,"exploited":false,"fixed_versions":["2.1.1"],"id":"tcs_01M5KGGGJ9Y0B3CQHYMPXHV4MJ","modified_at":"2023-11-08T04:09:13.275498Z","published_at":"2022-05-25T01:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-203","https://github.com/pallets/werkzeug/commit/9a3a981d70d2e9ec3344b5192f86fcaf3210cd85","https://github.com/pallets/werkzeug/issues/2420"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-203","url":"https://osv.dev/vulnerability/PYSEC-2022-203"}],"summary":"** DISPUTED ** Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included in"}