—PyPI
PYSEC-2020-43· CVE-2020-25032, GHSA-xc3p-ff3m-f46vModified: 10/9/2025
package
PyPI/flask-cors
pkg:pypi/flask-cors
MEDIUM5.3PyPI
PYSEC-2024-271· CVE-2024-1681, GHSA-84pr-m4jr-85g5Modified: 6/10/2026
HIGH7.5PyPI
PYSEC-2024-71· CVE-2024-6221, GHSA-hxwh-jpp2-84pmModified: 7/9/2026
MEDIUM5.3PyPI
PYSEC-2026-1383· CVE-2024-6866, GHSA-43qf-4rqw-9q2gFlask-CORS vulnerable to Improper Handling of Case Sensitivity
Modified: 7/7/2026
MEDIUM4.3PyPI
PYSEC-2026-1384· CVE-2024-6839, GHSA-7rxf-gvfg-47g4Flask-CORS improper regex path matching vulnerability
Modified: 7/7/2026
MEDIUM5.3PyPI
PYSEC-2026-1385· CVE-2024-6844, GHSA-8vgw-p6qm-5gr7Flask-CORS allows for inconsistent CORS matching
Modified: 7/7/2026
MEDIUM5.3PyPI
GHSA-43qf-4rqw-9q2g· CVE-2024-6866, PYSEC-2026-1383Flask-CORS vulnerable to Improper Handling of Case Sensitivity
Modified: 9/10/2026
MEDIUM4.3PyPI
GHSA-7rxf-gvfg-47g4· CVE-2024-6839, PYSEC-2026-1384Flask-CORS improper regex path matching vulnerability
Modified: 9/10/2026
MEDIUM5.3PyPI
GHSA-84pr-m4jr-85g5· CVE-2024-1681, PYSEC-2024-271flask-cors vulnerable to log injection when the log level is set to debug
Modified: 9/10/2026
MEDIUM5.3PyPI
GHSA-8vgw-p6qm-5gr7· CVE-2024-6844, PYSEC-2026-1385Flask-CORS allows for inconsistent CORS matching
Modified: 9/10/2026
HIGH7.5PyPI
GHSA-hxwh-jpp2-84pm· CVE-2024-6221, PYSEC-2024-71Flask-CORS allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default
Modified: 9/10/2026
HIGH7.5PyPI
GHSA-xc3p-ff3m-f46v· CVE-2020-25032, PYSEC-2020-43Flask-Cors Directory Traversal vulnerability
Modified: 9/10/2026