<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-02T14:50:16.281681+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/brew-grip-cve-2018-1000656</id>
    <title>BREW-grip-CVE-2018-1000656 — Flask is vulnerable to Denial of Service via incorrect encoding of JSON data</title>
    <updated>2026-10-02T14:50:16.288156+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Homebrew: grip</p>
<p>The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/brew-grip-cve-2018-1000656"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2024-avi-0366</id>
    <title>certfr-2024-avi-0366 — De multiples vulnérabilités ont été découvertes dans &lt;span
class="textit"&gt;les produits IBM&lt;/span&gt;. Certaines d'entre el…</title>
    <updated>2026-10-02T14:50:16.288204+00:00</updated>
    <content>certfr-2024-avi-0366</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2024-avi-0366"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-71222</id>
    <title>EUVD-2026-71222</title>
    <updated>2026-10-02T14:50:16.288223+00:00</updated>
    <content>EUVD-2026-71222</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-71222"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000656</id>
    <title>fkie_cve-2018-1000656</title>
    <updated>2026-10-02T14:50:16.288236+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. NOTE: this may overlap CVE-2019-1010083.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000656"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-562c-5r94-xh97</id>
    <title>GHSA-562c-5r94-xh97 — Flask is vulnerable to Denial of Service via incorrect encoding of JSON data</title>
    <updated>2026-10-02T14:50:16.288257+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> PyPI: Flask</p>
<p>The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-562c-5r94-xh97"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2018-1000656</id>
    <title>gsd-2018-1000656</title>
    <updated>2026-10-02T14:50:16.288278+00:00</updated>
    <content>gsd-2018-1000656</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2018-1000656"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2019:1112-1</id>
    <title>openSUSE-SU-2019:1112-1 — Security update for python-Flask</title>
    <updated>2026-10-02T14:50:16.288288+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for python-Flask</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2019:1112-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/pysec-2018-66</id>
    <title>PYSEC-2018-66</title>
    <updated>2026-10-02T14:50:16.288304+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> PyPI: flask</p>
<p>The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. NOTE: this may overlap CVE-2019-1010083.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/pysec-2018-66"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/rhsa-2020:0870</id>
    <title>RHSA-2020:0870 — Red Hat Security Advisory: python-flask security update</title>
    <updated>2026-10-02T14:50:16.288331+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>python-flask: Denial of Service via crafted JSON file</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/rhsa-2020:0870"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/suse-su-2019:0657-1</id>
    <title>SUSE-SU-2019:0657-1 — Security update for python-Flask</title>
    <updated>2026-10-02T14:50:16.288346+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for python-Flask</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/suse-su-2019:0657-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1000656</id>
    <title>UBUNTU-CVE-2018-1000656</title>
    <updated>2026-10-02T14:50:16.288359+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: flask, Ubuntu:16.04:LTS: flask, Ubuntu:18.04:LTS: flask</p>
<p>The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. NOTE: this may overlap CVE-2019-1010083.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1000656"/>
  </entry>
</feed>
