CLSA-2026-1789716215 TuxCare security update for flask-cors (4 CVEs)

TuxCare rebuilt flask-cors to address 4 CVEs. Fixed in 3.0.10.post1+tuxcare...

CLSA-2026-1789123062 TuxCare security update for flask-cors (3 CVEs)

TuxCare rebuilt flask-cors to address 3 CVEs. Fixed in 5.0.1.post1+tuxcare...

CLSA-2026-1787900734 TuxCare security update for flask-cors (1 CVE)

TuxCare rebuilt flask-cors to address 1 CVE. Fixed in 4.0.2.post3+tuxcare...

CLSA-2026-1781139191 TuxCare security update for flask-cors (1 CVE)

TuxCare rebuilt flask-cors to address 1 CVE. Fixed in 4.0.2.post2+tuxcare...

CLSA-2025-1759882315 TuxCare security update for flask-cors (1 CVE)

TuxCare rebuilt flask-cors to address 1 CVE. Fixed in 4.0.2.post1+tuxcare...

ROOT-APP-PYPI-CVE-2024-1681 CVE-2024-1681 in rootio-flask-cors - Patched by Root

Root has patched CVE-2024-1681 in the rootio-flask-cors package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-6221 CVE-2024-6221 in rootio-flask-cors - Patched by Root

Root has patched CVE-2024-6221 in the rootio-flask-cors package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-6866 CVE-2024-6866 in rootio-flask-cors - Patched by Root

Root has patched CVE-2024-6866 in the rootio-flask-cors package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-6844 CVE-2024-6844 in rootio-flask-cors - Patched by Root

Root has patched CVE-2024-6844 in the rootio-flask-cors package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-6839 CVE-2024-6839 in rootio-flask-cors - Patched by Root

Root has patched CVE-2024-6839 in the rootio-flask-cors package for Root:PyPI. Multiple fixed versions available...

Flask-CORS vulnerable to Improper Handling of Case Sensitivity

corydolphin/flask-cors version 5.0.1 contains a vulnerability where the request path matching is case-insensitive due to the use of the trymatch function, which is originally intended for matching hosts. This results in a mismatch because paths in URLs are case-sensitive, but the regex matching...

PYSEC-2026-1383 Flask-CORS vulnerable to Improper Handling of Case Sensitivity

corydolphin/flask-cors version 5.0.1 contains a vulnerability where the request path matching is case-insensitive due to the use of the trymatch function, which is originally intended for matching hosts. This results in a mismatch because paths in URLs are case-sensitive, but the regex matching...

PYSEC-2026-1384 Flask-CORS improper regex path matching vulnerability

corydolphin/flask-cors version 5.0.1 contains an improper regex path matching vulnerability. The plugin prioritizes longer regex patterns over more specific ones when matching paths, which can lead to less restrictive CORS policies being applied to sensitive endpoints. This mismatch in regex...

Security Bulletin: Log Injection Vulnerability in orydolphin/flask-cors (Debug Logging) affects watsonx.data

Summary A vulnerability in orydolphin/flask-cors allows attackers to inject malicious log entries when debug logging is enabled. By sending specially crafted requests containing CRLF sequences, an attacker can corrupt or forge log entries, potentially obscuring other attacks or disrupting log...

python311-Flask-Cors-6.0.2-1.1 on GA media (moderate)

python311-Flask-Cors-6.0.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10485-1 Rating: moderate Cross-References: CVE-2024-6839 CVE-2024-6844 CVE-2024-6866 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all securit...

OPENSUSE-SU-2026:10485-1 python311-Flask-Cors-6.0.2-1.1 on GA media

These are all security issues fixed in the python311-Flask-Cors-6.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities due to Flask-Cors

Summary Flask-Cors is used by IBM Cloud Pak for Data System to handle Cross-Origin Resource Sharing CORS for web applications. Multiple vulnerabilities affect Flask-Cors path matching functionality. CVE-2024-6866 involves case-insensitive path matching that can allow unauthorized origins to acces...

Mageia: Security Advisory (MGASA-2025-0286)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated python-flask-cors packages fix security vulnerabilities

Log Injection Vulnerability in corydolphin/flask-cors. CVE-2024-1681 Improper Access Control in corydolphin/flask-cors. CVE-2024-6221 Improper Regex Path Matching in corydolphin/flask-cors. CVE-2024-6839 Inconsistent CORS Matching Due to Handling of '+' in URL Path in corydolphin/flask-cors...

MGASA-2025-0286 Updated python-flask-cors packages fix security vulnerabilities

Log Injection Vulnerability in corydolphin/flask-cors. CVE-2024-1681 Improper Access Control in corydolphin/flask-cors. CVE-2024-6221 Improper Regex Path Matching in corydolphin/flask-cors. CVE-2024-6839 Inconsistent CORS Matching Due to Handling of '+' in URL Path in corydolphin/flask-cors...