Skip to content
OpenAdvisories

Vendor

jugmac00

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-27641 Public exploit

    Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection

    Flask-Reuploaded provides file uploads for Flask. A critical path traversal and extension bypass vulnerability in versions prior to 1.5.0 allows remote attackers to achieve arbitrary file write and remote code execution through Server-Side Template Injection …