CyberSecBulletin

Jugmac00 vulnerabilities

We track 2 vulnerabilities in Jugmac00 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 14, 2026.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Jugmac00 vulnerabilities

  • 7.5 High severity

    flask-reuploaded: Improper Handling of Case Sensitivity

    CVE-2026-54567Jugmac00

    Flask-Reuploaded provides file uploads for Flask. From 1.5.0 until 1.6.0, UploadSet.save(storage, name=...) in src/flask_uploads/flask_uploads.py applies lowercase_ext to the default upload path but uses the case-preserving extension helper for a caller-suppli

  • 9.8 Critical severity

    flask-reuploaded: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-27641Jugmac00EPSS 1.34%

    Flask-Reuploaded provides file uploads for Flask. A critical path traversal and extension bypass vulnerability in versions prior to 1.5.0 allows remote attackers to achieve arbitrary file write and remote code execution through Server-Side Template Injection (