Issues

• uWSGI: a one-byte stack overflow in the PHP plugin's activate_user_config() on every docroot-mode request

  unbit/uwsgi#2783 · Filter by author thaidn opened on Oct 12, 2026

• uwsgi: a long request path overflows a stack buffer in the CGI plugin's uwsgi_cgi_walk()

  unbit/uwsgi#2782 · Filter by author thaidn opened on Oct 12, 2026

• JVM plugin leaks JNI local refs in uwsgi_jvm_create and caches FindClass as locals

  unbit/uwsgi#2779 · Filter by author QiuYucheng2003 opened on Sep 16, 2026

• The listen setting does not allow env var substitution

  unbit/uwsgi#2777 · Filter by author cpastordev opened on Sep 4, 2026

• Segfault, causing workers to hang forever on futex

  unbit/uwsgi#2776 · Filter by author wiebeytec opened on Aug 10, 2026

• HTTP parser request-smuggling primitives (dup-CL / obs-fold / Content-Length overflow)

  unbit/uwsgi#2775 · Filter by author afldl opened on Jul 20, 2026

• [SAST] Use after free

  unbit/uwsgi#2773 · Filter by author LM4O322 opened on May 25, 2026

• [SAST] Infinite count of cycle iterations

  unbit/uwsgi#2772 · Filter by author LM4O322 opened on May 25, 2026

• [SAST] Usage without validity and bounds check

  unbit/uwsgi#2771 · Filter by author LM4O322 opened on May 25, 2026

• [SAST] Possible typo

  unbit/uwsgi#2770 · Filter by author LM4O322 opened on May 25, 2026

• [SAST] Unsafe functions and patterns usage

  unbit/uwsgi#2769 · Filter by author LM4O322 opened on May 25, 2026

• [SAST] Possible overflow caused by the lack of upper bound verification

  unbit/uwsgi#2768 · Filter by author LM4O322 opened on May 25, 2026

• [SAST] Possible integer overflow without explicit cast.

  unbit/uwsgi#2767 · Filter by author LM4O322 opened on May 25, 2026

• [SAST] Several potential handle leaks

  unbit/uwsgi#2762 · Filter by author Canned-pineapple-8 opened on May 6, 2026

• [SAST] Several potential memory leaks

  unbit/uwsgi#2760 · Filter by author Canned-pineapple-8 opened on May 5, 2026

• [SAST] Potential missing error handling for various function calls

  unbit/uwsgi#2759 · Filter by author Canned-pineapple-8 opened on Apr 29, 2026

• [SAST] Several minor unreachable code and redundant checks instances

  unbit/uwsgi#2757 · Filter by author Canned-pineapple-8 opened on Apr 23, 2026

• Potential missing chdir("/") after chroot() in /core/utils.c (uwsgi_as_root())

  unbit/uwsgi#2756 · Filter by author Canned-pineapple-8 opened on Apr 23, 2026

• [SAST] Several potential null dereference cases

  unbit/uwsgi#2755 · Filter by author Canned-pineapple-8 opened on Apr 23, 2026

• Build failure when Python interpreter directory has whitespaces

  unbit/uwsgi#2750 · Filter by author mkniewallner opened on Feb 6, 2026

• Memory Leak in uwsgi_master_manage_events (master_events.c) .SAST

  unbit/uwsgi#2747 · Filter by author Babaijan opened on Nov 28, 2025

• uwsgi.SymbolsImporter breaks on Python 3.12+ due to missing find_spec (PEP 451)

  unbit/uwsgi#2745 · Filter by author brian-from-quantrocket opened on Oct 28, 2025

• uWSGI does not terminate if a hook fails and attach-daemon is used

  unbit/uwsgi#2741 · Filter by author cuu508 opened on Sep 25, 2025
  1

• Segmentation Fault when enabling --py-call-uwsgi-fork-hooks with Python 3.12 + Sentry SDK

  unbit/uwsgi#2738 · Filter by author Denys-Varenyk opened on Sep 11, 2025
  3

• https://projects.unbit.it/downloads/uwsgi-lts.tar.gz SSL certificate expired

  unbit/uwsgi#2732 · Filter by author qzwxsaedc opened on Jul 9, 2025
  2