CVE-2025-62379
2 advisories.
PyPI/reflex CVE-2025-62379: low 3.1
reflex-dev/reflex has an Open Redirect vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.5.4 | - | 0.8.14 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-rfh5-c9h5-q8jm
- https://github.com/reflex-dev/reflex/security/advisories/GHSA-rfh5-c9h5-q8jm
- https://nvd.nist.gov/vuln/detail/CVE-2025-62379
- https://github.com/reflex-dev/reflex/commit/ade12549f3c0ddab3d7382c581bc04a3c1f989ec
- https://file.notion.so/f/f/d105d145-04bc-45c5-b46c-ed880895e9de/a86c3e3b-f67f-45d1-8fa2-4aa0ba7d0068/poc.mp4?table=block&id=26955717-5d2e-805a-b53c-e25ee03f1d4b&spaceId=d105d145-04bc-45c5-b46c-ed880895e9de&expirationTimestamp=1760508000000&signature=ZPp8PVldfGOh0gB5tVElRV6GN789R-EG0oxZgkFjjLU&downloadName=poc.mp4
- https://github.com/reflex-dev/reflex
- https://github.com/reflex-dev/reflex/blob/51f9f2c2f52cac4d66c07683a12bc0237311b6be/reflex/utils/codespaces.py#L18-L46
CVE-2025-62379 · published · modified · JSON
PyPI/reflex CVE-2025-62379: low 3.1
reflex-dev/reflex has an Open Redirect vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.5.4 | - | 0.8.14 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1868
- https://github.com/reflex-dev/reflex/security/advisories/GHSA-rfh5-c9h5-q8jm
- https://nvd.nist.gov/vuln/detail/CVE-2025-62379
- https://github.com/reflex-dev/reflex/commit/ade12549f3c0ddab3d7382c581bc04a3c1f989ec
- https://file.notion.so/f/f/d105d145-04bc-45c5-b46c-ed880895e9de/a86c3e3b-f67f-45d1-8fa2-4aa0ba7d0068/poc.mp4?table=block&id=26955717-5d2e-805a-b53c-e25ee03f1d4b&spaceId=d105d145-04bc-45c5-b46c-ed880895e9de&expirationTimestamp=1760508000000&signature=ZPp8PVldfGOh0gB5tVElRV6GN789R-EG0oxZgkFjjLU&downloadName=poc.mp4
- https://github.com/reflex-dev/reflex
- https://github.com/reflex-dev/reflex/blob/51f9f2c2f52cac4d66c07683a12bc0237311b6be/reflex/utils/codespaces.py#L18-L46
- https://pypi.org/project/reflex
- https://github.com/advisories/GHSA-rfh5-c9h5-q8jm
CVE-2025-62379 · published · modified · JSON