Skip to content
OpenAdvisories
High DSA-4775-1 1 CVE

python-flask-cors - security update

Published Oct 19, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 python-flask-cors 3.0.7-1+deb10u1

Vulnerabilities 1

  • High 7.5
    CVE-2020-25032

    Flask-Cors Directory Traversal vulnerability

    An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.

    flask-cors python-flask-cors python-flask-cors Debian Ubuntu PyPI