https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:28:12 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-07531 bdu:2024-07531 https://cve.radiocsirt.org/vuln/bdu:2024-07531 https://cve.radiocsirt.org/vuln/brew-locust-cve-2024-6221 <p><strong>Affected:</strong> Homebrew: locust</p> <p>A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default, without any configuration option. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions.</p> <p><strong>Affected:</strong> Homebrew: locust</p> <p>A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default, without any configuration option. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions.</p> https://cve.radiocsirt.org/vuln/brew-locust-cve-2024-6221 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0873 certfr-2024-avi-0873 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0873 https://cve.radiocsirt.org/vuln/euvd-2026-227336 EUVD-2026-227336 https://cve.radiocsirt.org/vuln/euvd-2026-227336 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6221 <p>A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions.</p> <p>A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-6221 https://cve.radiocsirt.org/vuln/ghsa-hxwh-jpp2-84pm <p><strong>Affected:</strong> PyPI: Flask-Cors</p> <p>A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default, without any configuration option. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions.</p> <p><strong>Affected:</strong> PyPI: Flask-Cors</p> <p>A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default, without any configuration option. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions.</p> https://cve.radiocsirt.org/vuln/ghsa-hxwh-jpp2-84pm https://cve.radiocsirt.org/vuln/oesa-2024-2198 <p><strong>Affected:</strong> openEuler:24.03-LTS: python-Flask-Cors</p> <p>A Flask extension for handling Cross Origin Resource Sharing (CORS), making cross-origin AJAX possible. Security Fix(es): A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default, without any configuration option. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions.(CVE-2024-6221)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: python-Flask-Cors</p> <p>A Flask extension for handling Cross Origin Resource Sharing (CORS), making cross-origin AJAX possible. Security Fix(es): A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default, without any configuration option. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions.(CVE-2024-6221)</p> https://cve.radiocsirt.org/vuln/oesa-2024-2198 https://cve.radiocsirt.org/vuln/pysec-2024-260 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> PyPI: flask-cors</p> <p>Withdrawn as duplicate of PYSEC-2024-71. A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> PyPI: flask-cors</p> <p>Withdrawn as duplicate of PYSEC-2024-71. A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions.</p> https://cve.radiocsirt.org/vuln/pysec-2024-260 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-6221 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: python-flask-cors, Ubuntu:22.04:LTS: python-flask-cors, Ubuntu:Pro:24.04:LTS: python-flask-cors</p> <p>A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions.</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: python-flask-cors, Ubuntu:22.04:LTS: python-flask-cors, Ubuntu:Pro:24.04:LTS: python-flask-cors</p> <p>A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default. This behavior can expose private network resources to unauthorized external access, leading to significant security risks such as data breaches, unauthorized access to sensitive information, and potential network intrusions.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-6221