Malicious code in matplotlib-flask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15cce6ca7d9ce0af312425dec9ae608529c322b940526b20135cdcd8673ba31c The OpenSSF Package Analysis project identified 'matplotlib-flask' @ 7.15.10 pypi as malicious. It is considered malicious because: - The packag...

MAL-2023-1376 Malicious code in matplotlib-flask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15cce6ca7d9ce0af312425dec9ae608529c322b940526b20135cdcd8673ba31c The OpenSSF Package Analysis project identified 'matplotlib-flask' @ 7.15.10 pypi as malicious. It is considered malicious because: - The packag...

Malicious code in requests-flask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c161ba3569bb42a4df0893e7bcb73dff9fc8371d01638f7fe27ecdf9011074f0 The OpenSSF Package Analysis project identified 'requests-flask' @ 16.9.16 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1402 Malicious code in requests-flask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c161ba3569bb42a4df0893e7bcb73dff9fc8371d01638f7fe27ecdf9011074f0 The OpenSSF Package Analysis project identified 'requests-flask' @ 16.9.16 pypi as malicious. It is considered malicious because: - The package...

Security Bulletin: Multiple Vulnerabilities in Multicloud Management Security Services

Summary Multiple vulnerabilities were fixed in IBM Cloud Pak for Multicloud Management Security Services Vulnerability Details CVEID:CVE-2022-31512 DESCRIPTION: flask-mvc could allow a remote attacker to traverse directories on the system, caused by the Flask sendfile function being used unsafely...

SUSE CVE-2023-30861

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

CVE-2023-30861

A flaw was found in the Python Flask package. A cached response may contain data for one client sent by a proxy to other clients, including session cookies, resulting in the compromise of data confidentiality contained in the leak requests or cookies. This happens when the following conditions ar...

The vulnerability of the Flask framework lies in its ability to send a single client’s cookie session file to other users, allowing an attacker to access protected information.

The vulnerability of the Flask framework lies in the ability to send a session cookie file from one client to other users. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to protected information...

Information Disclosure

flask is vulnerable to Information Disclosure. The vulnerability exists due to the missing Vary cookie header in the savesession function of sessions.py, which leads to the disclosure of the session cookie, or sending data to a client who did not make the request...

CVE-2023-30861

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

AZL-43798 CVE-2023-30861 affecting package python-flask 1.1.1-4

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

AZL-44718 CVE-2023-30861 affecting package python-flask 1.1.1-4

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

DEBIAN-CVE-2023-30861

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

Design/Logic Flaw

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

UBUNTU-CVE-2023-30861

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

PYSEC-2023-62

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

CVE-2023-30861

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

PYSEC-2023-62

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

CVE-2023-30861

Flask vulnerability CVE-2023-30861 arises when a responsive cached by a proxy may include data for one client and serve it to others, potentially leaking a session cookie. Root cause: Flask previously only set the Vary: Cookie header when the session was accessed or modified, not when it was refr...

CVE-2023-30861

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...