Homepage
About Snyk

flask-cors@4.0.2 vulnerabilities

A Flask extension adding a decorator for CORS support

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the flask-cors package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Improper Access Control

Flask-Cors is an A Flask extension adding a decorator for CORS support

Affected versions of this package are vulnerable to Improper Access Control due to the default configuration of the Access-Control-Allow-Private-Network CORS header. An attacker can expose private network resources to unauthorized external access by leveraging this default setting.

How to fix Improper Access Control?

Upgrade Flask-Cors to version 5.0.0 or higher.

[4.0.0,5.0.0)
Go back to all versions of this package