Issues

New issue

[Style] Incorporate wemake-python-styleguide
#253 · webknjaz opened on Dec 3, 2019
25
Defer HTTP/1.1 parsing to Hyper (h11 project)
#201 · webknjaz opened on May 15, 2019
14

HTTPConnection not passing proxy_mode and strict_mode to HTTPRequest __init__
cherrypy/cheroot#823 · opened on May 25, 2026
3
Socket write buffer can be cleared prematurely causing truncated files
cherrypy/cheroot#821 · opened on May 18, 2026
Replace self.server.error_log() with self.error_log() in HTTPServer._serve_unservicable()
Bug
cherrypy/cheroot#797 · opened on Nov 14, 2025
1
[TODO] Address suppressed warnings in pytest
Task
cherrypy/cheroot#768 · opened on Sep 22, 2025
Python 3.14 compatibility
Bug
cherrypy/cheroot#767 · opened on Sep 22, 2025
14
Update documentation related to built-in SSL vs proper production setup
Bug
cherrypy/cheroot#765 · opened on Sep 22, 2025
1
constrained disk space cause vicious loop leading to file descriptor exhaustion
Bug
cherrypy/cheroot#756 · opened on Sep 17, 2025
1
Memory leak on connection close due to circular reference
Bug
cherrypy/cheroot#746 · opened on May 30, 2025
2
Integrate tlsfuzzer
Task
cherrypy/cheroot#741 · opened on Feb 24, 2025
Does a security scanner crash worker threads (again)?
Bug
cherrypy/cheroot#740 · opened on Feb 24, 2025
3
_ is incorrectly permitted in Content-Length header values
Bug
cherrypy/cheroot#738 · opened on Feb 3, 2025
Cheroot is vulnerable to request smuggling via multiple Content-Length headers
Bug
cherrypy/cheroot#737 · opened on Jan 2, 2025
1
Cheroot ('s test suite?) is hardcoding error codes specific to x86 Linux
Task
cherrypy/cheroot#736 · opened on Nov 30, 2024
1
random failures when running test_conn with Python 3.13
Bug
cherrypy/cheroot#734 · opened on Nov 5, 2024
11
Cheroot responds to incomplete requests when the connection is half-closed
Bug
cherrypy/cheroot#732 · opened on Jul 23, 2024
Cheroot responds 500 when first header field line is a continuation
Bug
cherrypy/cheroot#728 · opened on Jul 6, 2024
Cheroot clobbers previous lines' values during field line folding
Bug
cherrypy/cheroot#726 · opened on Jul 5, 2024
Cheroot incorrectly strips \x0b, \x0c, and \x0d from the beginnings and ends of header values.
Bug
cherrypy/cheroot#725 · opened on Jul 4, 2024
Cheroot ignores the Content-Length header when the connection is half-closed.
Bug
cherrypy/cheroot#724 · opened on Jul 4, 2024
Cheroot allows empty HTTP header names
Bug
cherrypy/cheroot#721 · opened on Jun 28, 2024
NUL and CR incorrectly permitted within header values
Bug
cherrypy/cheroot#720 · opened on Jun 25, 2024
1
Cheroot cannot send a 400 response for requests with invalid chunked message bodies
Bug
cherrypy/cheroot#718 · opened on Jun 16, 2024
1
Cheroot incorrectly allows whitespace after HTTP versions
Bug
cherrypy/cheroot#717 · opened on Jun 15, 2024
Cheroot's HTTP method parsing is too permissive
Bug
cherrypy/cheroot#715 · opened on Jun 8, 2024
Cheroot incorrectly allows whitespace after header names
Bug
cherrypy/cheroot#714 · opened on Jun 7, 2024
2

Navigation Menu

Issues

Issues

HTTPConnection not passing proxy_mode and strict_mode to HTTPRequest init

Socket write buffer can be cleared prematurely causing truncated files

Replace `self.server.error_log()` with `self.error_log()` in `HTTPServer._serve_unservicable()`

[TODO] Address suppressed warnings in pytest

Python 3.14 compatibility

Update documentation related to built-in SSL vs proper production setup

constrained disk space cause vicious loop leading to file descriptor exhaustion

Memory leak on connection close due to circular reference

Integrate `tlsfuzzer`

Does a security scanner crash worker threads (again)?

`_` is incorrectly permitted in `Content-Length` header values

Cheroot is vulnerable to request smuggling via multiple `Content-Length` headers

Cheroot ('s test suite?) is hardcoding error codes specific to x86 Linux

random failures when running test_conn with Python 3.13

Cheroot responds to incomplete requests when the connection is half-closed

Cheroot responds 500 when first header field line is a continuation

Cheroot clobbers previous lines' values during field line folding

Cheroot incorrectly strips `\x0b`, `\x0c`, and `\x0d` from the beginnings and ends of header values.

Cheroot ignores the `Content-Length` header when the connection is half-closed.

Cheroot allows empty HTTP header names

NUL and CR incorrectly permitted within header values

Cheroot cannot send a 400 response for requests with invalid chunked message bodies

Cheroot incorrectly allows whitespace after HTTP versions

Cheroot's HTTP method parsing is too permissive

Cheroot incorrectly allows whitespace after header names