web2py vulnerabilities
4 published CVEs name web2py among the affected products.
- 4Published CVEs4 of them scored
- 1Last 12 monthspublished in the last year
- 1Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-25198
web2py versions 2.27.1-stable+timestamp.2023.11.16.08.03.57 and prior contain an open redirect vulnerability. If this vulnerability is exploited, the user may…
web2py · web2py
Medium5.1 - CVE-2023-45158
An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifySendHandler for logging (not the default…
web2py · web2py
Critical9.8 - CVE-2023-22432
Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary website by…
web2py · web2py
Medium6.1 - CVE-2022-33146
Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing…
web2py · web2py
Medium6.1