CVE-2020-5236

Waitress 1.4.2 ReDoS - CVE-2020-5236 (Blog Sample Code)

Waitress 142 ReDoS - CVE-2020-5236 Waitress version 142 allows a DOS attack When waitress receives a header that contains invalid characters When a header like "Bad-header: xxxxxxxxxxxxxxx\x10" is received, it will cause the regular expression engine to catastrophically backtrack causing the process to use 100% CPU time and blocking any other interactions This

Fetches security vulnerabilities and creates pip-constraints based on them.

security-constraints Security-constraints is a command-line application used to fetch security vulnerabilities in Python packages from external sources and from them generate version constraints for the packages The constraints can then be given to pip install with the -c option, either on the command line or in a requirements file Installation Just install it with pip: pip i