Homepage

uwsgi@2.0.15 vulnerabilities

The uWSGI server

  • latest version

    2.0.28

  • latest non vulnerable version

    2.0.28

  • first published

    11 years ago

  • latest version published

    2 months ago

  • licenses detected

  • View uwsgi package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the uwsgi package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    HTTP Response Splitting

    Affected versions of this package are vulnerable to HTTP Response Splitting via mod_proxy_uwsgi. Special characters in the origin response header can truncate/split the response forwarded to the client.

    How to fix HTTP Response Splitting?

    Upgrade uWSGI to version 2.0.22 or higher.

    [,2.0.22)
    • H
    Directory Traversal

    uWSGI aims at developing a full stack for building hosting services.

    Affected versions of this package are vulnerable to Directory Traversal attacks due to mishandling a DOCUMENT_ROOT check during use of the --php-docroot option.

    [,2.0.17)
    Go back to all versions of this package