Lucene search
+L

4 matches found

OSV
OSV
added 2026/07/07 2:34 p.m.10 views

PYSEC-2026-1383 Flask-CORS vulnerable to Improper Handling of Case Sensitivity

corydolphin/flask-cors version 5.0.1 contains a vulnerability where the request path matching is case-insensitive due to the use of the trymatch function, which is originally intended for matching hosts. This results in a mismatch because paths in URLs are case-sensitive, but the regex matching...

5.3CVSS6.5AI score0.00694EPSS
SaveExploits1References8
Rows per page
Query Builder