Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id.
{ "cwe_ids": [ "CWE-331" ], "github_reviewed": true, "nvd_published_at": "2019-08-09T15:15:00Z", "github_reviewed_at": "2019-08-21T16:01:59Z", "severity": "HIGH" }