https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T07:33:26.015846+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2020-25032 CVE-2020-25032 2026-09-29T07:33:26.021088+00:00

An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.

 https://vulnerability.circl.lu/vuln/ghsa-xc3p-ff3m-f46v GHSA-xc3p-ff3m-f46v — Flask-Cors Directory Traversal vulnerability 2026-09-29T07:33:26.021194+00:00

Affected: PyPI: Flask-Cors

An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows `../` directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.

 https://vulnerability.circl.lu/vuln/pysec-2020-43 PYSEC-2020-43 2026-09-29T07:33:26.021247+00:00

Affected: PyPI: flask-cors

An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.