CVE-2016-10619: Pennyworth Project Pennyworth

High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days.

pennyworth is a natural language templating engine. pennyworth downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

Affected products

• Pennyworth Project Pennyworth: up to and including 1.0.1

Published 2018-06-01. Last modified 2026-06-17.