web2py Vulnerabilities

web2py has 14 published CVE records since 2013, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 5.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting web2py, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.