pallets werkzeug

Name: pallets werkzeug
Brand: pallets

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical3high4medium1low

updated 2026-10-28

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-34069US	—	3.40% (89th)	Exploit	no fix	2024-05-06	≤ < 3.0.3
CVE-2023-46136US	high7.5	1.29% (70th)	Exploit	2.3.8	2023-10-25	2 versions
CVE-2026-27199US	medium5.3	0.63% (50th)	Exploit	no fix	2026-02-21	≤ < 3.1.6
CVE-2023-25577US	high7.5	1.42% (73rd)	—	no fix	2023-02-14	≤ < 2.2.3
CVE-2024-49767US	high7.5	1.09% (65th)	—	3.0.6	2024-10-25	2.0.0rc1, → 3.0.6
CVE-2024-49766US	medium5.3	0.78% (56th)	—	no fix	2024-10-25	≤ < 3.0.6
CVE-2025-66221US	medium5.3	0.51% (43rd)	—	no fix	2025-11-29	≤ < 3.1.4
CVE-2023-23934US	low3.5	0.51% (43rd)	—	no fix	2023-02-14	≤ < 2.2.3
CVE-2026-21860US	medium5.3	0.47% (41st)	—	no fix	2026-01-08	≤ < 3.1.5

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-67Improper Handling of Windows Device Names3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-407Inefficient Algorithmic Complexity1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.