comet-common (>=1.0.5, <=2.0.3), comet-core (>=1.0.4, <=2.0.1) +5 more potentially affected by CVE-2024-6844 via flask-cors (3.0.4)

flask-cors PYPI version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - comet-common =1.0.5, =1.0.4, =0.4.4a3, =0.0.24, =0.4.0, =0.4.4a3, =0.4.4 Source cves: CVE-2024-6844 Source advisory: OSV:PYSEC-2026-1385...

allennlp (>=0.8.0, <=0.8.2), lapdog (0.15.4) +15 more potentially affected by CVE-2024-6844 via flask-cors (3.0.7)

flask-cors PYPI version 3.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - allennlp =0.8.0, =0.5.1.dev0, =1.1.4, =3.9.6, =0.2.0, =0.1.0, =0.1.0, =0.1.3, =0.3.8, =0.2.3, =1.0.1, =1.4.0.dev26 and more Source cves:...

altair-images (>=0.1.0, <=0.1.4), amundsen-common (>=0.14.0, <=0.15.3) +69 more potentially affected by CVE-2024-6844 via flask-cors (3.0.8)

flask-cors PYPI version 3.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - altair-images =0.1.0, =0.14.0, =3.10.0, =2.4.0, =3.9.0, =2.4.1, =0.1.0.dev1, =0.11.0, =0.9.0, =0.1.0, =0.2.2 and more Source cves:...

appfly (>=0.1.0, <=2.1.0), boyaa-seed (>=0.1.1, <=0.1.6) +6 more potentially affected by CVE-2024-6844 via flask-cors (3.0.6)

flask-cors PYPI version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - appfly =0.1.0, =0.1.1, =0.0.8, =1.2.0, =0.1.3, =0.2.10, =0.10.0, =0.100.3 Source cves: CVE-2024-6844 Source advisory: OSV:PYSEC-2026-1385...

chaosmonkey (>=1.0.8, <=1.1.0), flexget (>=2.10.60, <=3.1.104) +10 more potentially affected by CVE-2024-6844 via flask-cors (3.0.2)

flask-cors PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - chaosmonkey =1.0.8, =2.10.60, =0.1.0rc0, =23.1.0, =3.0.2.dev1, =21.10.5, =0.6.0, =1.0.2, =1.0.5 Source cves: CVE-2024-6844 Source advisory:...

wikilabels (>=0.3.1, <=0.4.0) potentially affected by CVE-2024-6844 via flask-cors (2.1.3)

flask-cors PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - wikilabels =0.3.1, =0.4.0 Source cves: CVE-2024-6844 Source advisory: OSV:PYSEC-2026-1385...

PYSEC-2026-1385 Flask-CORS allows for inconsistent CORS matching

A vulnerability in corydolphin/flask-cors version 5.0.1 allows for inconsistent CORS matching due to the handling of the '+' character in URL paths. The request.path is passed through the unquoteplus function, which converts the '+' character to a space ' '. This behavior leads to incorrect path...

sevenpack (2.7.1) potentially affected by CVE-2024-6844 via flask-cors (2.0.1)

flask-cors PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - sevenpack 2.7.1 Source cves: CVE-2024-6844 Source advisory: OSV:PYSEC-2026-1385...

Flask-CORS vulnerable to Improper Handling of Case Sensitivity

corydolphin/flask-cors version 5.0.1 contains a vulnerability where the request path matching is case-insensitive due to the use of the trymatch function, which is originally intended for matching hosts. This results in a mismatch because paths in URLs are case-sensitive, but the regex matching...

aberoth-ephemeris (>=1.0.0, <=1.1.0), agent-manager-sdk (>=0.1.1, <=0.1.2) +26 more potentially affected by CVE-2024-6844 via flask-cors (4.0.1)

flask-cors PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - aberoth-ephemeris =1.0.0, =0.1.1, =1.0.11a1, =1.5.3, =0.1.28, =3.11.32, =1.8.0, =0.7.5, =1.1.0, =12.0.17, =1.0.0, =0.6.2, =0.1.0, =0.1.3 and...

astaligner (>=0.1.0, <=1.0.2), cacaodocs (>=0.1.3, <=0.1.14) +30 more potentially affected by CVE-2024-6839 via flask-cors (5.0.0)

flask-cors PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - astaligner =0.1.0, =0.1.3, =0.1.0, =1.0.0a0, =0.1.0, =1.0.0, =1.5.8, =0.1.0, =0.0.10, =3.11.44, =3.3.4, =0.0.1, =0.0.3 and more Source cves:...

aberoth-ephemeris (>=1.0.0, <=1.1.0), agent-manager-sdk (>=0.1.1, <=0.1.2) +26 more potentially affected by CVE-2024-6839 via flask-cors (4.0.1)

flask-cors PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - aberoth-ephemeris =1.0.0, =0.1.1, =1.0.11a1, =1.5.3, =0.1.28, =3.11.32, =1.8.0, =0.7.5, =1.1.0, =12.0.17, =1.0.0, =0.6.2, =0.1.0, =0.1.3 and...

abstra (>=1.8.8, <=2.5.1), adeso (>=0.0.1, <=0.0.4) +70 more potentially affected by CVE-2024-6866 via flask-cors (4.0.0)

flask-cors PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - abstra =1.8.8, =0.0.1, =0.0.1, =0.0.6.dev1, =0.1.2, =0.0.7, =0.2.18, =0.1.0, =51.9.7, =0.0.25, =0.0.10, =0.0.12 and more Source cves:...

chaosmonkey (>=1.0.8, <=1.1.0), flexget (>=2.10.60, <=3.1.104) +10 more potentially affected by CVE-2024-6839 via flask-cors (3.0.2)

flask-cors PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - chaosmonkey =1.0.8, =2.10.60, =0.1.0rc0, =23.1.0, =3.0.2.dev1, =21.10.5, =0.6.0, =1.0.2, =1.0.5 Source cves: CVE-2024-6839 Source advisory:...

comet-common (>=1.0.5, <=2.0.3), comet-core (>=1.0.4, <=2.0.1) +5 more potentially affected by CVE-2024-6866 via flask-cors (3.0.4)

flask-cors PYPI version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - comet-common =1.0.5, =1.0.4, =0.4.4a3, =0.0.24, =0.4.0, =0.4.4a3, =0.4.4 Source cves: CVE-2024-6866 Source advisory: OSV:PYSEC-2026-1383...

apilogicserver (>=1.4.0, <=5.3.33) potentially affected by CVE-2024-6839 via flask-cors (3.0.0)

flask-cors PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - apilogicserver =1.4.0, =5.3.33 Source cves: CVE-2024-6839 Source advisory: OSV:PYSEC-2026-1384...

appfly (>=0.1.0, <=2.1.0), boyaa-seed (>=0.1.1, <=0.1.6) +6 more potentially affected by CVE-2024-6866 via flask-cors (3.0.6)

flask-cors PYPI version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - appfly =0.1.0, =0.1.1, =0.0.8, =1.2.0, =0.1.3, =0.2.10, =0.10.0, =0.100.3 Source cves: CVE-2024-6866 Source advisory: OSV:PYSEC-2026-1383...

wikilabels (>=0.3.1, <=0.4.0) potentially affected by CVE-2024-6839 via flask-cors (2.1.3)

flask-cors PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - wikilabels =0.3.1, =0.4.0 Source cves: CVE-2024-6839 Source advisory: OSV:PYSEC-2026-1384...

actionpi (>=1.1.4, <=1.2.0.dev22), backwardcompatibilityml (>=1.0.0, <=1.4.2) +28 more potentially affected by CVE-2024-6866 via flask-cors (3.0.9)

flask-cors PYPI version 3.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - actionpi =1.1.4, =1.0.0, =0.3.24, =1.4.0rc1, =0.0.1, =3.1.6, =0.1.17, =0.0.17, =0.8.0, =0.1.8.1, =0.1.1, =0.0.12, =0.0.22 and more Source...

aberoth-ephemeris (>=1.0.0, <=1.1.0), agent-manager-sdk (>=0.1.1, <=0.1.2) +26 more potentially affected by CVE-2024-6866 via flask-cors (4.0.1)

flask-cors PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - aberoth-ephemeris =1.0.0, =0.1.1, =1.0.11a1, =1.5.3, =0.1.28, =3.11.32, =1.8.0, =0.7.5, =1.1.0, =12.0.17, =1.0.0, =0.6.2, =0.1.0, =0.1.3 and...