Сообщество свободного программного обеспечения Werkzeug

Name: Сообщество свободного программного обеспечения Werkzeug
Brand: Сообщество свободного программного обеспечения

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical4high0medium1low

updated 2026-10-28

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-29361US	critical9.8	8.07% (95th)	Exploit	no fix	2022-05-25	≤ 2.1.0
CVE-2024-34069US	—	3.40% (89th)	Exploit	no fix	2024-05-06	≤ 3.0.3
CVE-2023-46136US	high7.5	1.29% (70th)	Exploit	no fix	2023-10-25	2 versions
CVE-2019-14806US	high7.5	1.91% (80th)	—	no fix	2019-08-09	≤ 0.15.3
CVE-2023-25577US	high7.5	1.42% (73rd)	—	no fix	2023-02-14	≤ 2.2.3
CVE-2024-49767US	high7.5	1.09% (65th)	—	no fix	2024-10-25	≤ 3.0.6
CVE-2023-23934US	low3.5	0.51% (43rd)	—	no fix	2023-02-14	≤ 2.2.3

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-331Insufficient Entropy1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-407Inefficient Algorithmic Complexity1 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.