https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:52:17.109225+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-01702 bdu:2021-01702 2026-10-04T05:52:17.314750+00:00 bdu:2021-01702 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0366 certfr-2024-avi-0366 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits IBM</span>. Certaines d'entre el… 2026-10-04T05:52:17.314794+00:00 certfr-2024-avi-0366 https://cve.radiocsirt.org/vuln/euvd-2026-45362 EUVD-2026-45362 2026-10-04T05:52:17.314815+00:00 EUVD-2026-45362 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25032 fkie_cve-2020-25032 2026-10-04T05:52:17.314828+00:00

An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.

 https://cve.radiocsirt.org/vuln/ghsa-xc3p-ff3m-f46v GHSA-xc3p-ff3m-f46v — Flask-Cors Directory Traversal vulnerability 2026-10-04T05:52:17.314859+00:00

Affected: PyPI: Flask-Cors

An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows `../` directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.

 https://cve.radiocsirt.org/vuln/gsd-2020-25032 gsd-2020-25032 2026-10-04T05:52:17.314883+00:00 gsd-2020-25032 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1393-1 openSUSE-SU-2020:1393-1 — Security update for python-Flask-Cors 2026-10-04T05:52:17.314895+00:00

Security update for python-Flask-Cors

 https://cve.radiocsirt.org/vuln/pysec-2020-43 PYSEC-2020-43 2026-10-04T05:52:17.314912+00:00

Affected: PyPI: flask-cors

An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25032 UBUNTU-CVE-2020-25032 2026-10-04T05:52:17.314930+00:00

Affected: Ubuntu:20.04:LTS: python-flask-cors

An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.