Issues

Issues

• ThreadPool.shrink() miscounts pending shutdowns, and a stopped pool can hang on restart

  cherrypy/cheroot#861 · opened on Oct 19, 2026

• Statistics keep every server, and retired worker threads, alive

  cherrypy/cheroot#860 · opened on Oct 19, 2026

• Add optional HTTP/2 support while preserving pure-Python design

  cherrypy/cheroot#857 · opened on Oct 10, 2026

• Feature: Add HTTP/2 support (h2)

  cherrypy/cheroot#856 · opened on Oct 10, 2026

• HTTPConnection not passing proxy_mode and strict_mode to HTTPRequest __init__

  cherrypy/cheroot#823 · opened on May 25, 2026
  3

• Socket write buffer can be cleared prematurely causing truncated files

  cherrypy/cheroot#821 · opened on May 18, 2026

• Replace self.server.error_log() with self.error_log() in HTTPServer._serve_unservicable()

  Bug

  cherrypy/cheroot#797 · opened on Nov 14, 2025
  1

• [TODO] Address suppressed warnings in pytest

  Task

  cherrypy/cheroot#768 · opened on Sep 22, 2025

• Python 3.14 compatibility

  Bug

  cherrypy/cheroot#767 · opened on Sep 22, 2025
  14

• Update documentation related to built-in SSL vs proper production setup

  Bug

  cherrypy/cheroot#765 · opened on Sep 22, 2025
  1

• constrained disk space cause vicious loop leading to file descriptor exhaustion

  Bug

  cherrypy/cheroot#756 · opened on Sep 17, 2025
  1

• Memory leak on connection close due to circular reference

  Bug

  cherrypy/cheroot#746 · opened on May 30, 2025
  2

• Integrate tlsfuzzer

  Task

  cherrypy/cheroot#741 · opened on Feb 24, 2025

• Does a security scanner crash worker threads (again)?

  Bug

  cherrypy/cheroot#740 · opened on Feb 24, 2025
  3

• _ is incorrectly permitted in Content-Length header values

  Bug

  cherrypy/cheroot#738 · opened on Feb 3, 2025

• Cheroot is vulnerable to request smuggling via multiple Content-Length headers

  Bug

  cherrypy/cheroot#737 · opened on Jan 2, 2025
  1

• Cheroot ('s test suite?) is hardcoding error codes specific to x86 Linux

  Task

  cherrypy/cheroot#736 · opened on Nov 30, 2024
  1

• random failures when running test_conn with Python 3.13

  Bug

  cherrypy/cheroot#734 · opened on Nov 5, 2024
  11

• Cheroot responds to incomplete requests when the connection is half-closed

  Bug

  cherrypy/cheroot#732 · opened on Jul 23, 2024

• Cheroot responds 500 when first header field line is a continuation

  Bug

  cherrypy/cheroot#728 · opened on Jul 6, 2024

• Cheroot clobbers previous lines' values during field line folding

  Bug

  cherrypy/cheroot#726 · opened on Jul 5, 2024

• Cheroot incorrectly strips \x0b, \x0c, and \x0d from the beginnings and ends of header values.

  Bug

  cherrypy/cheroot#725 · opened on Jul 4, 2024

• Cheroot ignores the Content-Length header when the connection is half-closed.

  Bug

  cherrypy/cheroot#724 · opened on Jul 4, 2024

• Cheroot allows empty HTTP header names

  Bug

  cherrypy/cheroot#721 · opened on Jun 28, 2024

• NUL and CR incorrectly permitted within header values

  Bug

  cherrypy/cheroot#720 · opened on Jun 25, 2024
  1