How many CVEs does web2py web2py have?

web2py web2py has 14 published CVE records since 2013.

How many web2py web2py CVEs are in CISA KEV?

None of web2py web2py's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for web2py web2py vulnerabilities?

Yes — 4 of web2py web2py's CVEs have a known public exploit.

Which versions of web2py web2py are affected?

264 distinct web2py web2py versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in web2py web2py CVEs?

web2py web2py's CVEs most often map to these CWE weakness types: CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).

How many critical web2py web2py vulnerabilities are there?

web2py web2py has 4 critical and 2 high-severity CVEs.

What is the average severity of web2py web2py CVEs?

The average CVSS base score across web2py web2py's scored CVEs is 6.9.

web2py Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every web2py version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

R-2.10.112 CVEs
R-2.10.212 CVEs
R-2.10.312 CVEs
R-2.10.412 CVEs
R-2.10.4.beta12 CVEs
R-2.11.112 CVEs
R-2.11.212 CVEs
R-2.12.112 CVEs
R-2.12.212 CVEs
R-2.12.312 CVEs
R-2.13.112 CVEs
R-2.13.212 CVEs
R-2.13.312 CVEs
R-2.13.412 CVEs
R-2.4.212 CVEs
R-2.4.312 CVEs
R-2.4.412 CVEs
R-2.4.512 CVEs
R-2.4.612 CVEs
R-2.4.712 CVEs
R-2.5.112 CVEs
R-2.6.112 CVEs
R-2.6.212 CVEs
R-2.6.312 CVEs
R-2.6.412 CVEs
R-2.7.112 CVEs
R-2.7.212 CVEs
R-2.7.312 CVEs
R-2.7.412 CVEs
R-2.8.112 CVEs
R-2.8.212 CVEs
R-2.9.1012 CVEs
R-2.9.1112 CVEs
R-2.9.1212 CVEs
R-2.9.212 CVEs
R-2.9.312 CVEs
R-2.9.412 CVEs
R-2.9.512 CVEs
R-2.9.612 CVEs
R-2.9.712 CVEs
R-2.9.812 CVEs
R-2.9.912 CVEs
R-2.14.111 CVEs
R-2.14.28 CVEs
R-2.14.38 CVEs
R-2.14.48 CVEs
R-2.14.58 CVEs
2.18.44 CVEs
2.19.14 CVEs
2.19.24 CVEs
2.20.14 CVEs
2.20.24 CVEs
2.20.34 CVEs
2.20.44 CVEs
2.21.14 CVEs
2.22.14 CVEs
2.22.24 CVEs
2.22.34 CVEs
latest4 CVEs
R-2.14.64 CVEs
R-2.15.0b24 CVEs
R-2.15.14 CVEs
R-2.15.24 CVEs
R-2.15.34 CVEs
R-2.15.44 CVEs
R-2.16.0b14 CVEs
R-2.16.14 CVEs
R-2.17.14 CVEs
R-2.17.24 CVEs
R-2.18.24 CVEs
R-2.18.34 CVEs
R-2.18.54 CVEs
R-2.22.44 CVEs
2.22.53 CVEs
2.23.03 CVEs
2.24.12 CVEs
2.26.11 CVE
3.0.01 CVE
3.0.111 CVE
3.0.51 CVE
3.0.81 CVE
3.0.91 CVE
3.00.21 CVE
3.00.31 CVE
R-2.25.11 CVE

Version ranges

<= 2.14.54 CVEs
< 2.14.23 CVEs
< 2.14.62 CVEs
< 2.14.11 CVE
< 2.22.51 CVE
< 2.23.11 CVE
< 3.1.11 CVE
<= 2.2.11 CVE
<= 2.24.11 CVE
>= 2.24.1 and earlier1 CVE
>= versions prior to 2.22.51 CVE
>= versions prior to 2.23.11 CVE
1.16.0 <= v <= 1.16.01 CVE
1.17.0 <= v <= 1.17.0

Fixed in

2.14.23 CVEs
32650f0cbf2c0211195e792a219899f74856b73e3 CVEs
2.14.62 CVEs
2.14.11 CVE
2.22.51 CVE
2.23.11 CVE
3.1.11 CVE
7af5c2b5d6e4fa7f708ed2c7e36e721322ec52a61 CVE
936e2260b0c34c44e2f3674a893e96d2a7fad0a31 CVE
944d8bd8f3c5cf8ae296fc03d149056c653584261 CVE
9706d125b42481178d2b423de245f5d2faadbf401 CVE
973bb4a16f90931588e01b644498f34f6d0773771 CVE

Find a version

14 CVEs

Sort

Medium vulnerability · 2026-02-05
CVE-2026-25198
Patch
CWE-601
Medium · CVSS 5.1
EPSS 0.3% (22th pct)2026-02-05
Critical vulnerability · 2023-10-16
CVE-2023-45158
Patch
Critical · CVSS 9.8
EPSS 3.7% (89th pct)2023-10-16
Medium vulnerability · 2023-03-05
CVE-2023-22432
Public exploit
Patch
CWE-601
Medium · CVSS 6.1
EPSS 2.4% (82th pct)2023-03-05
Medium vulnerability · 2022-06-27
CVE-2022-33146
Patch
Medium · CVSS 6.1
EPSS 1.5% (71th pct)2022-06-27
Critical vulnerability · 2018-02-06
CVE-2016-3957
Patch
Critical · CVSS 9.8
EPSS 4.9% (91th pct)2018-02-06
Medium vulnerability · 2018-02-06
CVE-2016-3954
Patch
Medium · CVSS 5.5
EPSS 1.4% (69th pct)2018-02-06
Critical vulnerability · 2018-02-06
CVE-2016-3953
Patch
Critical · CVSS 9.8
EPSS 3.3% (87th pct)2018-02-06
High vulnerability · 2018-02-06
CVE-2016-3952
Patch
High · CVSS 7.8
EPSS 1.1% (61th pct)2018-02-06
Medium vulnerability · 2017-10-18
CVE-2015-6961
Patch
Medium · CVSS 6.1
EPSS 1.0% (60th pct)2017-10-18
Critical vulnerability · 2017-04-10
CVE-2016-10321
Patch
Critical · CVSS 9.8
EPSS 2.6% (84th pct)2017-04-10
Medium vulnerability · 2017-01-11
CVE-2016-4808
Public exploit
Patch
Medium · CVSS 4.5
EPSS 1.7% (75th pct)2017-01-11
Medium vulnerability · 2017-01-11
CVE-2016-4807
Public exploit
Medium · CVSS 4.8
EPSS 2.3% (81th pct)2017-01-11
High vulnerability · 2017-01-11
CVE-2016-4806
Public exploit
High · CVSS 7.5
EPSS 10.1% (95th pct)2017-01-11
Medium vulnerability · 2013-05-22
CVE-2013-2311
Medium · CVSS 4.3
EPSS 1.2% (64th pct)2013-05-22

web2py Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other web2py products

Frequently asked questions

References

Track web2py vulnerabilities