OSS Support Hub / Web Server

Python Web Server NOASSERTION Latest: 26.0.0

Gunicorn

Python WSGI HTTP server for UNIX, a pre-fork worker model server

Project Health at a Glance

Live data from GitHub and PyPI, updated daily.

10.6K+22
GitHub Stars
📦
26.0.0
Latest Release · 2 months ago
🔄
11d
Avg. Release Cadence
🐛
126
Open Issues
📅
16 days ago
Last Commit
🔒
6
Active CVEs

Data last fetched: 2026-07-17

Known Vulnerabilities

6 active CVEs reported via OSV.dev

Gunicorn contains Improper Neutralization of CRLF sequences in HTTP headers

Published: 2018-07-12 Fixed in: 19.5.0

Gunicorn HTTP Request/Response Smuggling vulnerability

Published: 2025-03-20 Fixed in: 22.0.0

Request smuggling leading to endpoint restriction bypass in Gunicorn

Published: 2024-04-16 Fixed in: 22.0.0
PYSEC-2018-55 Unknown

Published: 2018-04-18 Fixed in: 19.5.0
PYSEC-2026-1433 CVSS_V3

Gunicorn HTTP Request/Response Smuggling vulnerability

Published: 2026-07-07 Fixed in: 22.0.0
PYSEC-2026-1434 CVSS_V3

Request smuggling leading to endpoint restriction bypass in Gunicorn

Published: 2026-07-07 Fixed in: 22.0.0

Alternatives to Gunicorn

Other Web Server projects in the Python ecosystem worth evaluating.

Support Options for Gunicorn

Commercial Support from DepKeep

Get SLA-backed support, security patches, and direct access to senior engineers for Gunicorn — without relying on volunteer maintainers.