https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:20:41.767173+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-07531 bdu:2024-07531 2026-10-03T07:20:41.964555+00:00 bdu:2024-07531 https://cve.radiocsirt.org/vuln/brew-locust-cve-2024-6221 BREW-locust-CVE-2024-6221 — Flask-CORS allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default 2026-10-03T07:20:41.964600+00:00

Affected: Homebrew: locust

A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default, without any configuration option. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0873 certfr-2024-avi-0873 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T07:20:41.964657+00:00 certfr-2024-avi-0873 https://cve.radiocsirt.org/vuln/euvd-2026-227336 EUVD-2026-227336 2026-10-03T07:20:41.964696+00:00 EUVD-2026-227336 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6221 fkie_cve-2024-6221 2026-10-03T07:20:41.964711+00:00

A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions.

 https://cve.radiocsirt.org/vuln/ghsa-hxwh-jpp2-84pm GHSA-hxwh-jpp2-84pm — Flask-CORS allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default 2026-10-03T07:20:41.964737+00:00

Affected: PyPI: Flask-Cors

A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default, without any configuration option. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions.

 https://cve.radiocsirt.org/vuln/oesa-2024-2198 OESA-2024-2198 — python-Flask-Cors security update 2026-10-03T07:20:41.964760+00:00

Affected: openEuler:24.03-LTS: python-Flask-Cors

A Flask extension for handling Cross Origin Resource Sharing (CORS), making cross-origin AJAX possible. Security Fix(es): A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default, without any configuration option. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions.(CVE-2024-6221)

 https://cve.radiocsirt.org/vuln/pysec-2024-260 Withdrawn: PYSEC-2024-260 2026-10-03T07:20:41.964783+00:00

Withdrawn by the publisher.

Affected: PyPI: flask-cors

Withdrawn as duplicate of PYSEC-2024-71. A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-6221 UBUNTU-CVE-2024-6221 2026-10-03T07:20:41.964803+00:00

Affected: Ubuntu:Pro:20.04:LTS: python-flask-cors, Ubuntu:22.04:LTS: python-flask-cors, Ubuntu:Pro:24.04:LTS: python-flask-cors

A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions.