CVE-2022-31799: Bottlepy Bottle

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Bottle before 0.12.20 mishandles errors during early request binding.

Affected products

• Bottlepy Bottle: before 0.12.20 (fixed in 0.12.20)
• Debian Debian Linux: version 9.0 only; version 10.0 only; version 11.0 only
• Fedoraproject Fedora: version 35 only; version 36 only

Published 2022-06-02. Last modified 2026-06-17.