ROOT-APP-PYPI-CVE-2024-6221 CVE-2024-6221 in rootio-flask-cors - Patched by Root

Root has patched CVE-2024-6221 in the rootio-flask-cors package for Root:PyPI. Multiple fixed versions available...

Mageia: Security Advisory (MGASA-2025-0286)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-6221

creationtimestamp| type| source ---|---|--- 2025-08-16 04:05:10+00:00| seen| Telegram/jUBr-2Z07QlPsRlOpLba0gxgcCmPHGp7YgCZ06Htw9qw7s...

Ubuntu: Security Advisory (USN-7612-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-6221

Web Intelligence HTML interface in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2024-6221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in corydolphin/flask-cors version 4.0.1 allows the Access-Control-Allow-Private-Network CORS header to be set to true by default. This behavior...

Security Bulletin: Vulnerability in Flask-Cors affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2024-6221]

Summary The Flask-Cors package is used by IBM Cloud Pak for Data System 2.0 . IBM Cloud Pak for Data System 2.0 has addressed the applicable CVEs CVE-2024-6221. Vulnerability Details CVEID:CVE-2024-6221 DESCRIPTION: Flask-CORS could allow a remote attacker to obtain sensitive information, caused ...

Security Bulletin: IBM Maximo Application Suite, IBM Truststore Manager and IBM Asset Data Dictionary Component uses third party libraries which is vulnerable to multiple CVEs

Summary IBM Maximo Application Suite, IBM Truststore Manager and IBM Asset Data Dictionary Component uses FlaskCors-4.0.1-py2.py3-none-any.whl, requests-2.31.0-py3-none-any.whl, express-4.19.2.tgz, commons-compress-1.22.jar, commons-io-2.11.0.jar, urllib3-1.26.18-py2.py3-none-any.whl,...

OESA-2024-2198 python-Flask-Cors security update

A Flask extension for handling Cross Origin Resource Sharing CORS, making cross-origin AJAX possible. Security Fixes: A vulnerability in corydolphin/flask-cors version 4.0.1 allows the Access-Control-Allow-Private-Network CORS header to be set to true by default, without any configuration option...

CVE-2024-6221

creationtimestamp| type| source ---|---|--- 2024-08-18 21:37:39+00:00| seen| https://t.me/cvedetector/3474...

appfly (>=0.1.0, <=2.1.0), boyaa-seed (>=0.1.1, <=0.1.6) +6 more potentially affected by CVE-2024-6221 via flask-cors (3.0.6)

flask-cors PYPI version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - appfly =0.1.0, =0.1.1, =0.0.8, =1.2.0, =0.1.3, =0.2.10, =0.10.0, =0.100.3 Source cves: CVE-2024-6221 Source advisory: OSV:GHSA-HXWH-JPP2-84P...

actionpi (>=1.1.4, <=1.2.0.dev22), backwardcompatibilityml (>=1.0.0, <=1.4.2) +28 more potentially affected by CVE-2024-6221 via flask-cors (3.0.9)

flask-cors PYPI version 3.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - actionpi =1.1.4, =1.0.0, =0.3.24, =1.4.0rc1, =0.0.1, =3.1.6, =0.1.17, =0.0.17, =0.8.0, =0.1.8.1, =0.1.1, =0.0.12, =0.0.22 and more Source...

ag-llama-api (>=0.0.1, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.12) +298 more potentially affected by CVE-2024-6221 via flask-cors (3.0.10)

flask-cors PYPI version 3.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - ag-llama-api =0.0.1, =0.0.4, =0.0.13, =1.0.2, =2.5.0, =2.5.0, =0.1.0b2696.post0.dev1, =0.1.8, =0.0.1, =1.0.2, =1.0.1, =4.1.0, =3.4.0, =4.0....

aberoth-ephemeris (>=1.0.0, <=1.1.0), abstra (>=1.8.26, <=2.5.1) +92 more potentially affected by CVE-2024-6221 via flask-cors (>=4.0.0a0, <=4.0.1)

flask-cors PYPI version =4.0.0a0, =1.0.0, =1.8.26, =0.0.1, =0.1.1, =0.0.1, =0.0.6.dev1, =0.1.2, =0.0.7, =0.2.18, =0.1.0, =51.9.7, =52.0.0 - chatgpttts 1.0.0 - convopilot 0.2.8 and more Source cves: CVE-2024-6221 Source advisory: OSV:GHSA-HXWH-JPP2-84PM...

CVE-2024-6221 vulnerabilities

Vulnerabilities for packages: py3-flask-cors, kubeflow-jupyter-web-app, kubeflow-volumes-web-app...

CVE-2024-6221 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, py3-flask-cors, kubeflow-volumes-web-app...

feather (>=0.0.6, <=0.0.8) potentially affected by CVE-2024-6221 via flask-cors (1.1.2)

flask-cors PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - feather =0.0.6, =0.0.8 Source cves: CVE-2024-6221 Source advisory: OSV:PYSEC-2024-71...

sevenpack (2.7.1) potentially affected by CVE-2024-6221 via flask-cors (2.0.1)

flask-cors PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - sevenpack 2.7.1 Source cves: CVE-2024-6221 Source advisory: OSV:PYSEC-2024-71...

chaosmonkey (>=1.0.8, <=1.1.0), flexget (>=2.10.60, <=3.1.104) +10 more potentially affected by CVE-2024-6221 via flask-cors (3.0.2)

flask-cors PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - chaosmonkey =1.0.8, =2.10.60, =0.1.0rc0, =23.1.0, =3.0.2.dev1, =21.10.5, =0.6.0, =1.0.2, =1.0.5 Source cves: CVE-2024-6221 Source advisory:...

appfly (>=0.1.0, <=2.1.0), boyaa-seed (>=0.1.1, <=0.1.6) +6 more potentially affected by CVE-2024-6221 via flask-cors (3.0.6)

flask-cors PYPI version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - appfly =0.1.0, =0.1.1, =0.0.8, =1.2.0, =0.1.3, =0.2.10, =0.10.0, =0.100.3 Source cves: CVE-2024-6221 Source advisory: OSV:PYSEC-2024-71...