Vulnerabilities for flask-cors

First version without a known vulnerability: 6.0.0

Details

• GHSA-43qf-4rqw-9q2g2025-03-20

  Flask-CORS vulnerable to Improper Handling of Case Sensitivity

  Fixed in: 6.0.0

• GHSA-7rxf-gvfg-47g42025-03-20

  Flask-CORS improper regex path matching vulnerability

  Fixed in: 6.0.0

• GHSA-8vgw-p6qm-5gr72025-03-20

  Flask-CORS allows for inconsistent CORS matching

  Fixed in: 6.0.0

• GHSA-hxwh-jpp2-84pm2024-08-18

  Flask-CORS allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default

  Fixed in: 4.0.2

• GHSA-84pr-m4jr-85g52024-04-19

  flask-cors vulnerable to log injection when the log level is set to debug

  Fixed in: 4.0.1

• GHSA-xc3p-ff3m-f46v2021-05-06

  Flask-Cors Directory Traversal vulnerability

  Fixed in: 3.0.9