Vulnerabilities for CherryPy

First version without a known vulnerability: 2.1.1

Details

• GHSA-76x8-gg39-5jjg2022-05-01

  CherryPy Malicious cookies allow access to files outside the session directory

  Fixed in: 2.1.1, 3.0.2

• GHSA-vx77-5pf4-c9wr2022-05-01

  CherryPy Directory traversal vulnerability

  Fixed in: 2.1.1