abbr (0.0.0), blendedux (0.0.2) +32 more potentially affected by CVE-2019-1010083 via flask (0.11.1)

flask PYPI version 0.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - abbr 0.0.0 - blendedux 0.0.2 - burp-ui =0.4.1, =4.3.2, =1.4.3, =1.0.0.dev5, =1.0.0.dev0, =0.23.22, =0.0.1, =2.5.3, =0.18.1, =0.1.1, =1.0.0a1, =1.1.0...

burp-ui (>=0.6.0, <=0.6.6), dagit (>=0.3.2, <=0.4.3.post4) +4 more potentially affected by CVE-2019-1010083 via flask (0.12.4)

flask PYPI version 0.12.4 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - burp-ui =0.6.0, =0.3.2, =0.1.1, =0.1.1, =0.10.0, =2.0.2, =2.0.3 Source cves: CVE-2019-1010083 Source advisory: OSV:PYSEC-2019-179...

UBUNTU-CVE-2019-1010083

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656...

almanach (>=4.0.0, <=4.1.0), alo7-airflow (>=1.10.0, <=1.10.0.7) +37 more potentially affected by CVE-2019-1010083 via flask (0.12.5)

flask PYPI version 0.12.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - almanach =4.0.0, =1.10.0, =0.14.0, =1.0.18, =0.1.0, =0.0.1a0, =0.0.3a0, =3.0.0, =0.1.0, =0.2.1 and more Source cves: CVE-2019-1010083 Source advisory...

add-dependencies (2.3.0) potentially affected by CVE-2019-1010083 via flask (0.5.0)

flask PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - add-dependencies 2.3.0 Source cves: CVE-2019-1010083 Source advisory: OSV:PYSEC-2019-179...

allennlp (>=0.4.0, <=0.4.1), bentodev (>=0.1.17, <=2018.11.2) +7 more potentially affected by CVE-2019-1010083 via flask (0.12.1)

flask PYPI version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - allennlp =0.4.0, =0.1.17, =0.1.0, =0.9.2, =0.1.48, =0.1.0, =0.2.5 - spiderkeeper-zam 1.2.2 Source cves: CVE-2019-1010083 Source advisory:...

vuln-repo (>=0.0.2, <=0.0.4) potentially affected by CVE-2019-1010083 via flask (0.6.1)

flask PYPI version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - vuln-repo =0.0.2, =0.0.4 Source cves: CVE-2019-1010083 Source advisory: OSV:PYSEC-2019-179...

aequitas (>=0.26.0, <=0.42.0), appkernel (>=0.1.0, <=1.0.0) +37 more potentially affected by CVE-2019-1010083 via flask (0.12.2)

flask PYPI version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - aequitas =0.26.0, =0.1.0, =0.7.1, =0.1.0, =0.0.1, =0.0.5.1, =0.0.2, =0.1.1, =0.12.0, =2.10.60, =0.1.0, =0.2.0, =1.1.0, =1.2.0 and more Source cves:...

gief (0.0.3), larigira (>=0.2.0, <=1.3.3) +1 more potentially affected by CVE-2019-1010083 via flask (0.11.0)

flask PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - gief 0.0.3 - larigira =0.2.0, =0.0.11, =1.0.5 Source cves: CVE-2019-1010083 Source advisory: OSV:PYSEC-2019-179...

PYSEC-2019-179

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656...

CVE-2019-1010083

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656...

CVE-2019-1010083

CVE-2019-1010083 affects the Pallets Project Flask before 1.0, where crafted encoded JSON data can cause unexpected memory usage leading to denial of service. The fix is upgrading to Flask 1.0 (or later). This entry may overlap with CVE-2018-1000656 per multiple sources.

CVE-2019-1010083

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656...

abbr (0.0.0), add-dependencies (2.3.0) +158 more potentially affected by CVE-2019-1010083 via flask (>=0.5.0, <=0.12.5)

flask PYPI version =0.5.0, =0.26.0, =1.4.15, =0.11.1, =0.4.0, =4.0.0, =1.10.0, =0.1.0, =0.14.0, =0.1.1, =0.1.17, =0.1.0, =1.0.0 - blendedux 0.0.2 and more Source cves: CVE-2019-1010083 Source advisory: MEND:CVE-2019-1010083...

CVE-2019-1010083

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656...

vulhub

It is an offensive tool for Vulnerability Research. The repository, vulhub, is a collection of pre-built vulnerable environments based on Docker-Compose. It is designed to be used for vulnerability research and testing, allowing users to easily create and manage vulnerable environments without...

CVE-2019-1010083: Undefined Security Weakness

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656...

PT-2019-11460 · Pallets +1 · Flask +1

Name of the Vulnerable Software and Affected Versions: The Pallets Project Flask versions prior to 1.0 Description: The issue is related to unexpected memory usage, which can lead to denial of service. The attack vector involves crafted encoded JSON data. Recommendations: For versions prior to 1....

GHSA-94MF-XFG5-R247 Invenio-App vulnerable to host header injection attack

APPALLOWEDHOSTS not always preventing host header injection Impact A possible host header injection attack have been identified in Invenio-App. For an attack to be possible, all conditions below must be met: 1. Your webserver must have been configured to route all requests to your application. 2...

PT-2019-11622

Name of the Vulnerable Software and Affected Versions: Invenio-App versions prior to 1.1.1 Description: A host header injection attack has been identified in Invenio-App. This issue can be exploited if the web server is configured to route all requests to the application, the APP ALLOWED HOSTS...