Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 07:33:19 +0000 CVE-2020-25032 https://vulnerability.circl.lu/vuln/cve-2020-25032 <p>An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.</p> <p>An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.</p> https://vulnerability.circl.lu/vuln/cve-2020-25032 GHSA-xc3p-ff3m-f46v — Flask-Cors Directory Traversal vulnerability https://vulnerability.circl.lu/vuln/ghsa-xc3p-ff3m-f46v <p><strong>Affected:</strong> PyPI: Flask-Cors</p> <p>An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows `../` directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.</p> <p><strong>Affected:</strong> PyPI: Flask-Cors</p> <p>An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows `../` directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.</p> https://vulnerability.circl.lu/vuln/ghsa-xc3p-ff3m-f46v PYSEC-2020-43 https://vulnerability.circl.lu/vuln/pysec-2020-43 <p><strong>Affected:</strong> PyPI: flask-cors</p> <p>An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.</p> <p><strong>Affected:</strong> PyPI: flask-cors</p> <p>An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.</p> https://vulnerability.circl.lu/vuln/pysec-2020-43