web2py security advisories

1 threat alert tracking vulnerabilities and security advisories that affect web2py products.

Vulnios monitors web2py CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent web2py security news in one place, or click into an individual alert for full detail.

Critical Vulnerability: CVE-2016-10321 — web2py — web2py
web2py before 2.14.6 does not properly check if a host is denied before verifying passwords, allowing a remote attacker to perform brute-force attacks.
criticalCVE-2016-10321

Track web2py exposure across your environment

Vulnios automatically cross-references your asset inventory against new web2py CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.

Start a free scan

web2py security advisories

Critical Vulnerability: CVE-2016-10321 — web2py — web2py

Track web2py exposure across your environment