corydolphin/flask-cors vulnerabilities
2 known vulnerabilities in corydolphin/flask-cors from Corydolphin. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
corydolphin/flask-cors: Improper Handling of Case Sensitivity
corydolphin/flask-cors version 4.01 contains a vulnerability where the request path matching is case-insensitive due to the use of the `try_match` function, which is originally intended for matching hosts. This results in a mismatch because paths in URLs are c
- 7.5 High severity
corydolphin/flask-cors: Improper Access Control
A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default. This behavior can expose private network resources to unauthorized external access, leading to significant secur