Vulnerabilities > Bottlepy > Bottle > 0.6.3

DATE CVE VULNERABILITY TITLE RISK
2022-06-02 CVE-2022-31799 Improper Handling of Exceptional Conditions vulnerability in multiple products
Bottle before 0.12.20 mishandles errors during early request binding.
network
low complexity
bottlepy debian fedoraproject CWE-755
critical
9.8
2021-01-18 CVE-2020-28473 HTTP Request Smuggling vulnerability in multiple products
The package bottle from 0 and before 0.12.19 are vulnerable to Web Cache Poisoning by using a vector called parameter cloaking.
5.8