CVE-2021-33026

The CVE-2021-33026 entry concerns Flask-Caching up to 1.10.1 which uses Pickle for serialization. If an attacker can access cache storage (filesystem, Memcached, Redis, etc.), they can craft a payload to poison the cache and execute Python code (remote code execution/local privilege escalation). ...