Palletsprojects: >> Werkzeug >> 0.11.11 Security Vulnerabilities
Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id.
CVSS Score
7.5
EPSS Score
0.003
Published
2019-08-09
In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.
CVSS Score
7.5
EPSS Score
0.901
Published
2019-07-28
Page 2