uwsgi@2.0.6 vulnerabilities

The uWSGI server

Direct Vulnerabilities

Known vulnerabilities in the uwsgi package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
HTTP Response Splitting

Affected versions of this package are vulnerable to HTTP Response Splitting via mod_proxy_uwsgi. Special characters in the origin response header can truncate/split the response forwarded to the client.

How to fix HTTP Response Splitting?

Upgrade uWSGI to version 2.0.22 or higher.

[,2.0.22)
  • H
Directory Traversal

uWSGI aims at developing a full stack for building hosting services.

Affected versions of this package are vulnerable to Directory Traversal attacks due to mishandling a DOCUMENT_ROOT check during use of the --php-docroot option.

[,2.0.17)