reflex | Snyk

Direct Vulnerabilities

Known vulnerabilities in the reflex package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L GHSA-5639-2j2p-m4mx	<0.9.12-r1
L Directory Traversal	<0.9.12-r1
L Improper Input Validation	<0.9.3-r0
L Directory Traversal	<0.9.3-r0
L GHSA-f5p7-9fr5-8jmj	<0.9.3-r0
L GHSA-vrg7-482j-p6f6	<0.9.3-r0
L Uncaught Exception	<0.9.3-r0
L GHSA-pp6c-gr5w-3c5g	<0.9.3-r0
L GHSA-65pc-fj4g-8rjx	<0.9.3-r0
L Allocation of Resources Without Limits or Throttling	<0.9.3-r0
M Inefficient Regular Expression Complexity	<0.9.3-r0
L GHSA-2h4p-vjrc-8xpq	<0.9.3-r0
L GHSA-5239-wwwm-4pmq	<0.8.28-r2
L Resource Exhaustion	<0.8.28-r2
L GHSA-2c2j-9gv5-cj73	<0.8.3-r0
L GHSA-9hjg-9r4m-mvj7	<0.8.5-r0
L Allocation of Resources Without Limits or Throttling	<0.8.3-r0
L CVE-2025-8869	<0.8.14-r0
L Deserialization of Untrusted Data	<0.8.14-r0
L GHSA-4xh5-x5gv-qwph	<0.8.14-r0
L CVE-2024-12797	<0.7.1-r0
L GHSA-gmj6-6f8f-6699	<0.6.7-r0
L GHSA-79v4-65xg-pq4g	<0.7.1-r0
L GHSA-vqfr-h8mv-ghfj	<0.7.9-r0
L Allocation of Resources Without Limits or Throttling	<0.6.7-r0
L GHSA-h4gh-qq45-vh27	<0.6.1-r0
L Protection Mechanism Failure	<0.6.7-r0
H Improper Neutralization	<0.6.7-r0
L GHSA-59g5-xgcq-4qw3	<0.6.7-r0
L GHSA-7f5h-v6xp-fcq8	<0.8.17-r0
L GHSA-wp53-j4wj-2cfg	<0.8.27-r0
L Insufficiently Protected Credentials	<0.8.5-r0
L Allocation of Resources Without Limits or Throttling	<0.6.4-r0
L HTTP Request Smuggling	<0.7.9-r0
M Open Redirect	<0.8.0-r0
L GHSA-f96h-pmfr-66vw	<0.6.4-r0
L GHSA-q2x7-8rv6-6q7h	<0.6.7-r0
L CVE-2025-47425	<0.7.12-r0
H Improper Neutralization of Special Elements Used in a Template Engine	<0.7.2-r0
L GHSA-cpwx-vrp4-4pq7	<0.7.2-r0
H Directory Traversal	<0.8.27-r0
L Algorithmic Complexity	<0.8.17-r0
L GHSA-g8c6-8fjj-2r4m	<0.8.14-r0
L GHSA-48p4-8xcf-vxj5	<0.8.0-r0
H Insufficient Verification of Data Authenticity	<0.5.6-r0
L GHSA-cx63-2mw6-8hw5	<0.7.3-r0
L Arbitrary Code Injection	<0.7.3-r0
L CVE-2024-35195	<0.5.5-r0
M CVE-2024-37891	<0.5.5-r0
L Cross-site Scripting (XSS)	<0.5.0-r0
L CVE-2024-1135	<0.4.9-r0
H Inefficient Regular Expression Complexity	<0.4.0-r0
M Cross-site Scripting (XSS)	<0.3.9-r0

Vulnerability

Vulnerable Version

GHSA-5639-2j2p-m4mx

<0.9.12-r1