Debian/python-flask-cors: high 7.5
A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default. This behavior can expose private network resources t
Action: Upgrade python-flask-cors to 5.0.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.0-1 | - |
Fixed versions
| 5.0.0-1 |
Sources
- osv: DEBIAN-CVE-2024-6221#Debian:14/python-flask-cors
- https://security-tracker.debian.org/tracker/CVE-2024-6221
published · modified · JSON