Vulnerabilities for Quart

First version without a known vulnerability: 0.20.0

Details

• GHSA-v853-p72q-4cfw2026-10-05

  Quart leaks raw request body (incl. plaintext passwords) to stdout via stray debug print in Body.__await__

  Fixed in: 0.23.1

• GHSA-q34m-jh98-gwm22024-10-25

  Werkzeug possible resource exhaustion when parsing file data in forms

  Fixed in: 3.0.6, 0.20.0