CRITICAL9.8PyPI
GHSA-65mp-fq8v-56jr· CVE-2026-27641, PYSEC-2026-341Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection
Modified: 6/29/2026
package
PyPI/flask-reuploaded
pkg:pypi/flask-reuploaded
HIGH7.5PyPI
GHSA-937x-gpqr-72gg· CVE-2026-54567, PYSEC-2026-3466Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)
Modified: 7/23/2026
CRITICAL9.8PyPI
PYSEC-2026-341· CVE-2026-27641, GHSA-65mp-fq8v-56jrFlask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection
Modified: 7/1/2026
HIGH7.5PyPI
PYSEC-2026-3466· CVE-2026-54567, GHSA-937x-gpqr-72ggFlask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)
Modified: 7/23/2026