Login Request a demo
WE
Product
Werkzeug
by Palletsprojects · last CVE Feb 21, 2026
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 1High 6Medium 6Low 1
Severity
All severities14Critical1High6Medium6Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Werkzeug to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-28724
6.1
2%
Nov 18
Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL
Affected: before 0.11.6
CVE-2016-10516
6.1
2%
Oct 23
Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (as used in Pallets Flask and other…
Affected: before 0.11.11
CVE-2026-27199
5.3
1%
Feb 21
Werkzeug safe_join() allows Windows special device names
Affected: before 3.1.6
CVE-2026-21860
5.3
0%
Jan 8
Werkzeug safe_join() allows Windows special device names with compound extensions
Affected: before 3.1.5
CVE-2025-66221
5.3
1%
Nov 29
Werkzeug safe_join() allows Windows special device names
Affected: before 3.1.4
CVE-2024-49766
5.3
1%
Oct 25
Werkzeug safe_join not safe on Windows
Affected: before 3.0.6
Showing 6