CherryPy — CVE history (PyPI)
CherryPy
2 CVEs affect the CherryPy PyPI package. Latest disclosed: 2008-01-12. Full CVE history sourced from NVD.
Summary
- Package
CherryPy(PyPI)- Total CVEs
2- Actively exploited (CISA KEV)
- 0
- Highest CVSS
- —
- Latest disclosed
- 2008-01-12
Recent CVEs (top 2)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2008-0252 | — | — | — | 2008-01-12 | Directory traversal vulnerability in the _get_file_path function in (1) lib/sessions.py in CherryPy 3.0.x up to 3.0.2, (2) filter/sessionfilter.py in CherryPy 2.1, and (3) filter/sessionfilter.py in CherryPy 2.x allows remote attackers to… |
CVE-2006-0847 | — | — | — | 2006-02-22 | Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read arbitrary files via ".." sequences in unspecified vectors. |