CyberSecBulletin

Flask-cors Project vulnerabilities

We track 1 vulnerability in Flask-cors Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 20, 2025.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Flask-cors Project vulnerabilities

  • 7.5 High severity

    corydolphin/flask-cors: Improper Handling of Case Sensitivity

    CVE-2024-6866Corydolphin

    corydolphin/flask-cors version 4.01 contains a vulnerability where the request path matching is case-insensitive due to the use of the `try_match` function, which is originally intended for matching hosts. This results in a mismatch because paths in URLs are c