Skip to content
OpenAdvisories
High RHSA-2020:0870 1 CVE

Red Hat Security Advisory: python-flask security update

Published Sep 18, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Rhel Extras Other 7 rhel_extras_other:7 python-flask 1:0.10.1-5.el7_7

Vulnerabilities 1

  • High 7.5
    CVE-2018-1000656

    Flask is vulnerable to Denial of Service via incorrect encoding of JSON data

    The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provid…

    flask flask flask Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1623131
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0870.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-1000656
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-1000656
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-1000656