Agendaless Waitress

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs

Waitress has request processing race condition in HTTP pipelining with invalid first request

Published 2024-10-29 · Analyzed

9.1EPSS 0.005

HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers

Published 2019-12-26 · Modified

8.2EPSS 0.026

HTTP Request Smuggling: LF vs CRLF handling in Waitress

Published 2019-12-20 · Modified

7.5EPSS 0.025

HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress

Published 2019-12-20 · Modified

7.5EPSS 0.024

HTTP Request Smuggling: Content-Length Sent Twice in Waitress

Published 2020-01-22 · Modified

7.5EPSS 0.020

HTTP Request Smuggling in waitress

Published 2022-03-17 · Modified

7.5EPSS 0.018

Waitress has a denial of service leading to high CPU usage/resource exhaustion

Published 2024-10-29 · Modified

7.5EPSS 0.014

Catastrophic backtracking in regex allows Denial of Service in Waitress

Published 2020-02-04 · Modified

6.8EPSS 0.024

Uncaught Exception (due to a data race) leads to process termination in Waitress

Published 2022-05-31 · Modified

6.5EPSS 0.015