← All advisories

High severity7.5NVD Advisory· Published Jul 28, 2019· Updated Jun 17, 2026

CVE-2019-14322

CVE-2019-14322

Description

In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
werkzeugPyPI	< 0.15.5	0.15.5

Affected products

3

Pallets/Werkzeug
cpe:2.3:a:palletsprojects:werkzeug:*:*:*:*:*:*:*:*
Range: <0.15.5
Pallets/Werkzeugdescription
ghsa-coords
pkg:pypi/werkzeug
Range: < 0.15.5

Patches

Vulnerability mechanics

References

5

packetstormsecurity.com/files/163398/Pallets-Werkzeug-0.15.4-Path-Traversal.htmlnvdExploitThird Party AdvisoryVDB EntryWEB
github.com/advisories/GHSA-j544-7q9p-6xp8ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-14322ghsaADVISORY
palletsprojects.com/blog/werkzeug-0-15-5-released/nvdRelease NotesVendor Advisory
palletsprojects.com/blog/werkzeug-0-15-5-releasedghsaWEB

News mentions

0

No linked articles in our index yet.