PyPI/flask-caching CVE-2021-33026: medium 4.2, EPSS 7.35%
Deserialization of Untrusted Data in Flask-Caching
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.10.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-656c-6cxf-hvcv
- https://nvd.nist.gov/vuln/detail/CVE-2021-33026
- https://github.com/pallets-eco/flask-caching/pull/209#issuecomment-1136397937
- https://github.com/sh4nks/flask-caching/pull/209
- https://github.com/advisories/GHSA-656c-6cxf-hvcv
- https://github.com/pypa/advisory-database/tree/main/vulns/flask-caching/PYSEC-2021-13.yaml
- https://github.com/sh4nks/flask-caching
CVE-2021-33026 · published · modified · JSON