3576 matches found
CVE-2026-71241 Book-Management-System - Unauthenticated Disclosure of Student PII and Borrowing History
Book-Management-System's Flask API endpoints /student, /record, /books, /findstubook, and /findnotreturnbook are missing the @loginrequired decorator that protects sibling routes /searchstudent, /storage in the same file. Because cardid values are sequential integers, the entire student database...
EUVD-2026-53314
Book-Management-System's Flask API endpoints /student, /record, /books, /findstubook, and /findnotreturnbook are missing the @loginrequired decorator that protects sibling routes /searchstudent, /storage in the same file. This allows any unauthenticated remote user to retrieve student PII name,...
CVE-2026-71241 Book-Management-System - Unauthenticated Disclosure of Student PII and Borrowing History
Book-Management-System's Flask API endpoints /student, /record, /books, /findstubook, and /findnotreturnbook are missing the @loginrequired decorator that protects sibling routes /searchstudent, /storage in the same file. Because cardid values are sequential integers, the entire student database...
CVE-2026-71241
Book-Management-System's Flask API endpoints /student, /record, /books, /findstubook, and /findnotreturnbook are missing the @loginrequired decorator that protects sibling routes /searchstudent, /storage in the same file. This allows any unauthenticated remote user to retrieve student PII name,...
CVE-2026-71241
CVE-2026-71241 affects a Book-Management-System built with Flask. Several endpoints (/student, /record, /books, /find_stu_book, /find_not_return_book) are missing the @login_required decorator that protects related routes (/search_student, /storage). This misconfiguration allows any unauthenticat...
PT-2026-68107
Name of the Vulnerable Software and Affected Versions Book-Management-System affected versions not specified Description Certain Flask API endpoints lack the @login required decorator, which is used to restrict access to authenticated users. This flaw allows unauthenticated remote users to retrie...
CVE-2026-71241: Missing Authentication for Critical Function
Book-Management-System's Flask API endpoints /student, /record, /books, /findstubook, and /findnotreturnbook are missing the @loginrequired decorator that protects sibling routes /searchstudent, /storage in the same file. Because cardid values are sequential integers, the entire student database...
CLSA-2026-1781139191 TuxCare security update for flask-cors (1 CVE)
TuxCare rebuilt flask-cors to address 1 CVE. Fixed in 4.0.2.post2+tuxcare...
CLSA-2026-1772410250 TuxCare security update for flask (1 CVE)
TuxCare rebuilt flask to address 1 CVE. Fixed in 1.1.2.post1+tuxcare...
CLSA-2026-1772323849 TuxCare security update for flask (1 CVE)
TuxCare rebuilt flask to address 1 CVE. Fixed in 0.12.5.post1+tuxcare...
CLSA-2026-1772410252 TuxCare security update for flask (1 CVE)
TuxCare rebuilt flask to address 1 CVE. Fixed in 2.2.1.post1+tuxcare...
CLSA-2026-1772410251 TuxCare security update for flask (1 CVE)
TuxCare rebuilt flask to address 1 CVE. Fixed in 1.1.4.post1+tuxcare...
CLSA-2025-1759882315 TuxCare security update for flask-cors (1 CVE)
TuxCare rebuilt flask-cors to address 1 CVE. Fixed in 4.0.2.post1+tuxcare...
flask-adfs (>=0.0.1, <=0.1.8) potentially affected by CVE-2026-69248 via cryptography (1.5.1)
cryptography PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - flask-adfs =0.0.1, =0.1.8 Source cves: CVE-2026-69248 Source advisory: OSV:PYSEC-2026-3554...
flask-adfs (>=0.0.1, <=0.1.8) potentially affected by CVE-2026-69249 via cryptography (1.5.1)
cryptography PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - flask-adfs =0.0.1, =0.1.8 Source cves: CVE-2026-69249 Source advisory: OSV:PYSEC-2026-3553...
Exploit for Improper Input Validation in Google Chrome
--- CVE-2026-11112 – XXE via SVG Image Upload Program C...
PT-2026-73804
TuxCare rebuilt flask to address 1 CVE. Fixed in 0.12.5.post1+tuxcare...
PT-2026-73808
TuxCare rebuilt flask to address 1 CVE. Fixed in 2.2.1.post1+tuxcare...