Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

flask-cors

6 known vulnerabilities (5 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 5 medium
Registry
PyPI

Advisories 6

  • CVE-2024-6866Medium 5.3

    Case-Insensitive Path Matching in corydolphin/flask-cors

    Affected: fixed in 6.0.0.

  • CVE-2024-6844Medium 5.3

    Inconsistent CORS Matching Due to Handling of '+' in URL Path in corydolphin/flask-cors

    Affected: fixed in 6.0.0.

  • CVE-2024-6839Medium 4.3

    Improper Regex Path Matching in corydolphin/flask-cors

    Affected: fixed in 6.0.0.

  • CVE-2024-6221Medium 6.5

    Improper Access Control in corydolphin/flask-cors

    Affected: fixed in 4.0.2.

  • CVE-2024-1681Medium 5.3

    Log Injection Vulnerability in corydolphin/flask-cors

    Affected: fixed in 4.0.1; through 4.0.0.

  • An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9.

    Affected: fixed in 3.0.9; fixed in 3.0.9.