[ Vendor · 1 CVEs ]
pallets
CVEs affecting pallets published in the last 30 days, plus any pallets CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102598 | 29 Sep 2026 | CVSS 6.3 | Werkzeug safe_join() allows Windows special device namesWerkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safe_join function used by send_from_directory can allow a NUL… | Fix |