Skip to content
OpenAdvisories

Vendor

reflex-dev

1 known vulnerabilities.

Products

reflex 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2025-62379

    Open Redirect in reflex-dev/reflex

    Reflex is a library to build full-stack web apps in pure Python. In versions 0.5.4 through 0.8.14, the /auth-codespace endpoint automatically assigns the redirect_to query parameter value directly to client-side links without any validation and triggers autom…

    reflex-dev reflex reflex PyPI