Flask-Cors@4.0.0 vulnerabilities

A Flask extension adding a decorator for CORS support

Direct Vulnerabilities

Known vulnerabilities in the Flask-Cors package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • L
Log Injection

Flask-Cors is an A Flask extension adding a decorator for CORS support

Affected versions of this package are vulnerable to Log Injection when the log level is set to debug. A user can inject or modify messages by abusing CRLF sequences in the request path of a GET request.

How to fix Log Injection?

There is no fixed version for Flask-Cors.

[0,)