pycodium (>=0.1.0, <=0.2.1), reflex-ai (>=0.1.0a1, <=0.1.0a18) +11 more potentially affected by CVE-2025-62379 via reflex (>=0.6.0a4, <=0.8.7)

reflex PYPI version =0.6.0a4, =0.1.0, =0.1.0a1, =0.2.0, =0.0.1, =0.1.6, =1.0.0, =0.0.9, =10.0.11, =10.0.28 Source cves: CVE-2025-62379 Source advisory: OSV:PYSEC-2026-1868...

pycodium (>=0.1.0, <=0.2.1), reflex-ai (>=0.1.0a1, <=0.1.0a18) +11 more potentially affected by CVE-2025-62379 via reflex (>=0.6.0a4, <=0.8.7)

reflex PYPI version =0.6.0a4, =0.1.0, =0.1.0a1, =0.2.0, =0.0.1, =0.1.6, =1.0.0, =0.0.9, =10.0.11, =10.0.28 Source cves: CVE-2025-62379 Source advisory: SNYK:PYTHON-REFLEX-13560525...

pycodium (>=0.1.0, <=0.2.1), reflex-ai (>=0.1.0a1, <=0.1.0a18) +11 more potentially affected by CVE-2025-62379 via reflex (>=0.6.0a4, <=0.8.7)

reflex PYPI version =0.6.0a4, =0.1.0, =0.1.0a1, =0.2.0, =0.0.1, =0.1.6, =1.0.0, =0.0.9, =10.0.11, =10.0.28 Source cves: CVE-2025-62379 Source advisory: GHSA-RFH5-C9H5-Q8JM...

CVE-2025-62379

Reflex (Python web app framework) versions 0.5.4–0.8.14 contain an Open Redirect in the /auth-codespace route: the redirect_to query parameter is assigned directly to client-side links without validation, triggering automatic navigation, which can redirect users to arbitrary external URLs. The vu...

pycodium (>=0.1.0, <=0.2.1), reflex-ai (>=0.1.0a1, <=0.1.0a18) +11 more potentially affected by CVE-2025-62379 via reflex (>=0.6.0a4, <=0.8.7)

reflex PYPI version =0.6.0a4, =0.1.0, =0.1.0a1, =0.2.0, =0.0.1, =0.1.6, =1.0.0, =0.0.9, =10.0.11, =10.0.28 Source cves: CVE-2025-62379 Source advisory: MEND:CVE-2025-62379...