CVE-2026-27641

CVE-2026-27641 affects the Flask-Reuploaded package used with Flask. The vulnerability is a critical path traversal and extension bypass in versions prior to 1.5.0, enabling remote attackers to perform arbitrary file writes and remote code execution via Server-Side Template Injection (SSTI). The ...

CVE-2026-27641 Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection

Flask-Reuploaded provides file uploads for Flask. A critical path traversal and extension bypass vulnerability in versions prior to 1.5.0 allows remote attackers to achieve arbitrary file write and remote code execution through Server-Side Template Injection SSTI. Flask-Reuploaded has been patche...

flask-reuploaded 安全漏洞

Flask-Reuploaded is a file upload service software developed by Jürgen Gmach. Versions of Flask-Reuploaded prior to 1.5.0 contained security vulnerabilities, which were caused by path traversal and extension bypassing mechanisms. These vulnerabilities could lead to arbitrary file writing and remo...

PT-2026-21857

Name of the Vulnerable Software and Affected Versions Flask-Reuploaded versions prior to 1.5.0 Description Flask-Reuploaded, a file upload package for Flask, contains a path traversal and extension bypass flaw. This allows remote attackers to perform arbitrary file writes and achieve remote code...