Packages / Debian 12 (Bookworm) / Source / python / webpy
Web framework for Python applications
Web framework for Python applications
L’associazione dei pacchetti è in corso.
| CVE | Gravità | Impatto per versione |
|---|---|---|
| [CVE-2026-79310] Published: webpy web.py 0.76 is vulnerable to server-side template injection (SSTI). The template engine can be tricked into executing attacker-controlled template code that built-in security checks are designed | High(8.5) | SconosciutoDettagli (4)
|
| [CVE-2026-79311] Published: webpy web.py 0.76 is vulnerable to Cross Site Scripting (XSS) via render_jinja.__init__(). | Medium(6.1) | SconosciutoDettagli (4)
|
| [CVE-2026-79312] Published: webpy web.py 0.76 is vulnerable to Session Fixation. The component Session._load() reads session_id directly from the request cookie and loads that session from the store, and _save() writes back unde | Medium(6.8) | SconosciutoDettagli (4)
|
| [CVE-2026-79313] Published: webpy web.py 0.76 is vulnerable to Insufficient Session Expiration. The application's session management relies on periodic cleanup to expire sessions instead of checking the last-access time when a s | Critical(9.8) | SconosciutoDettagli (4)
|
| [CVE-2025-3818] Published: webpy: CVE-2025-3818 | Medium(6.3) | Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Dettagli (4)
|
Ultima sincronizzazione:
Authoritative source; repository metadata signature verified
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Authoritative source; repository metadata signature verified
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00