Werkzeug 3.1.6 security fix release

{
  "id": "331654de3a9a4c10d8f6a04db96308df3d230c171dd5b987758d0bc23fa3d846",
  "url": "https://github.com/pallets/werkzeug/releases/tag/3.1.6",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Werkzeug 3.1.6 security fix release",
    "summary": "Werkzeug 3.1.6 prevents special device names in multi-segment paths passed to safe_join on Windows.",
    "evidence": "This is the Werkzeug 3.1.6 security fix release, which fixes a security issue",
    "products": [
      {
        "name": {
          "value": "Werkzeug",
          "evidence": "Werkzeug 3.1.6 security fix release"
        },
        "prerequisites": [
          {
            "value": "on Windows",
            "evidence": "safe_join on Windows does not allow special devices names in multi-segment paths."
          }
        ],
        "fixed_versions": [
          {
            "value": "3.1.6",
            "evidence": "Werkzeug 3.1.6 security fix release"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-pallets-werkzeug",
  "document_id": 22124,
  "published_at": "2026-02-19T15:17:38+00:00"
}