CO
Vendor
corydolphin
5
CVEs
0
On KEV
0
New 30D
Products
CO7.5
corydolphin/flask-cors
corydolphin
3 CVEs0 on KEV0 new
FL7.5
Flask-cors
Corydolphin
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-6866 | CO corydolphin/flask-cors corydolphin | 7.5 | Mar 20 | Case-Insensitive Path Matching in corydolphin/flask-cors |
| CVE-2024-6844 | CO corydolphin/flask-cors corydolphin | 5.3 | Mar 20 | Inconsistent CORS Matching Due to Handling of '+' in URL Path in corydolphin/flask-cors |
| CVE-2024-6839 | CO corydolphin/flask-cors corydolphin | 5.3 | Mar 20 | Improper Regex Path Matching in corydolphin/flask-cors |
| CVE-2024-6221 | FL Flask-cors Corydolphin | 7.5 | Aug 18 | A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default |
| CVE-2024-1681 | FL Flask-cors Corydolphin | 5.3 | Apr 19 | corydolphin/flask-cors is vulnerable to log injection when the log level is set to debug |