PyPI: cheroot

SFTY-20210414-39873

Safety legacy ID: pyup.io-39125

Cheroot 6.3.2 introduces a HTTP 400 response to a malicious 'Content-Length' in the request headers. https://github.com/cherrypy/cheroot/commit/040f7bf687fb2c2ae5b98d0c15de65fdb7682a30

PyPI

Created at: Jul 14, 2026Updated at: Jul 14, 2026

Overview

Cheroot 6.3.2 introduces a HTTP 400 response to a malicious 'Content-Length' in the request headers. https://github.com/cherrypy/cheroot/commit/040f7bf687fb2c2ae5b98d0c15de65fdb7682a30

Advisory

Cheroot 6.3.2 introduces a HTTP 400 response to a malicious 'Content-Length' in the request headers. https://github.com/cherrypy/cheroot/commit/040f7bf687fb2c2ae5b98d0c15de65fdb7682a30

Affected Package

Affecting cheroot package, versions<6.3.2

Also affects

---

How to Fix

Upgradecherootto6.3.2or higher.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

References

https://getsafety.com/vulnerabilities/SFTY-20210414-39873

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more