{"action":"Upgrade flask to 0.12.3 or later.","affected":[{"fixed":"0.12.3","introduced":"0"}],"component":"flask","cve_ids":["CVE-2018-1000656"],"ecosystem":"PyPI","epss":0.03855,"exploited":false,"fixed_versions":["0.12.3"],"ghsa_id":"GHSA-562c-5r94-xh97","id":"tcs_01M5KF03ETGTC7WSF16A10RR4Y","modified_at":"2025-02-21T05:29:40.872529Z","published_at":"2018-08-23T19:10:40Z","references":["https://osv.dev/vulnerability/GHSA-562c-5r94-xh97","https://nvd.nist.gov/vuln/detail/CVE-2018-1000656","https://github.com/pallets/flask/pull/2691","https://github.com/pallets/flask/commit/b178e89e4456e777b1a7ac6d7199052d0dfdbbbe","https://github.com/advisories/GHSA-562c-5r94-xh97","https://github.com/pallets/flask","https://github.com/pallets/flask/releases/tag/0.12.3","https://github.com/pypa/advisory-database/tree/main/vulns/flask/PYSEC-2018-66.yaml","https://lists.debian.org/debian-lts-announce/2019/08/msg00025.html","https://security.netapp.com/advisory/ntap-20190221-0001","https://usn.ubuntu.com/4378-1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-562c-5r94-xh97","url":"https://osv.dev/vulnerability/GHSA-562c-5r94-xh97"}],"summary":"Flask is vulnerable to Denial of Service via incorrect encoding of JSON data"}