Corydolphin vulnerabilities
We track 2 vulnerabilities in Corydolphin products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 20, 2025.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Corydolphin vulnerabilities
- 7.5 High severity
corydolphin/flask-cors: Improper Handling of Case Sensitivity
corydolphin/flask-cors version 4.01 contains a vulnerability where the request path matching is case-insensitive due to the use of the `try_match` function, which is originally intended for matching hosts. This results in a mismatch because paths in URLs are c
- 7.5 High severity
corydolphin/flask-cors: Improper Access Control
A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default. This behavior can expose private network resources to unauthorized external access, leading to significant secur