All products

flask-cors

PyPI · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Flask-CORS vulnerable to Improper Handling of Case SensitivityCVE-2024-6866 · GHSA-43QF-4RQW-9Q2GVersion ranges need review. flask-cors PyPI Medium Fix reported
Flask-CORS allows for inconsistent CORS matchingCVE-2024-6844 · GHSA-8VGW-P6QM-5GR7Version ranges need review. flask-cors PyPI Medium Fix reported
Flask-CORS allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by defaultCVE-2024-6221 · GHSA-HXWH-JPP2-84PMVersion ranges need review. flask-cors PyPI High Fix reported
flask-cors vulnerable to log injection when the log level is set to debugCVE-2024-1681 · GHSA-84PR-M4JR-85G5Version ranges need review. flask-cors PyPI Medium Fix reported
Flask-CORS improper regex path matching vulnerabilityCVE-2024-6839 · GHSA-7RXF-GVFG-47G4Version ranges need review. flask-cors PyPI Medium Fix reported
Flask-Cors Directory Traversal vulnerabilityCVE-2020-25032 · GHSA-XC3P-FF3M-F46VVersion ranges need review. flask-corsRed Hat Quay 3/python-flask-cors PyPIRed Hat High Fix reported