https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:55:39 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-07921 bdu:2026-07921 https://cve.radiocsirt.org/vuln/bdu:2026-07921 https://cve.radiocsirt.org/vuln/cleanstart-2026-an24336 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: airflow-2</p> <p>Multiple security vulnerabilities affect the airflow-2 package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: airflow-2</p> <p>Multiple security vulnerabilities affect the airflow-2 package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-an24336 https://cve.radiocsirt.org/vuln/euvd-2026-239794 EUVD-2026-239794 https://cve.radiocsirt.org/vuln/euvd-2026-239794 https://cve.radiocsirt.org/vuln/fkie_cve-2025-32962 <p>Flask-AppBuilder is an application development framework built on top of Flask. Versions prior to 4.6.2 would allow for a malicious unauthenticated actor to perform an open redirect by manipulating the Host header in HTTP requests. Flask-AppBuilder 4.6.2 introduced the `FAB_SAFE_REDIRECT_HOSTS` configuration variable, which allows administrators to explicitly define which domains are considered safe for redirection. As a workaround, use a reverse proxy to enforce trusted host headers.</p> <p>Flask-AppBuilder is an application development framework built on top of Flask. Versions prior to 4.6.2 would allow for a malicious unauthenticated actor to perform an open redirect by manipulating the Host header in HTTP requests. Flask-AppBuilder 4.6.2 introduced the `FAB_SAFE_REDIRECT_HOSTS` configuration variable, which allows administrators to explicitly define which domains are considered safe for redirection. As a workaround, use a reverse proxy to enforce trusted host headers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-32962 https://cve.radiocsirt.org/vuln/ghsa-99pm-ch96-ccp2 <p><strong>Affected:</strong> PyPI: flask-appbuilder</p> <p>### Impact Flask-AppBuilder prior to 4.6.2 would allow for a malicious unauthenticated actor to perform an open redirect by manipulating the Host header in HTTP requests. ### Patches Flask-AppBuilder 4.6.2 introduced the `FAB_SAFE_REDIRECT_HOSTS` configuration variable, which allows administrators to explicitly define which domains are considered safe for redirection.</p> <p>Examples: ``` FAB_SAFE_REDIRECT_HOSTS = [&#34;yourdomain.com&#34;, &#34;sub.yourdomain.com&#34;, &#34;*.yourcompany.com&#34;] ```</p> <p>### Workarounds Use a Reverse Proxy to Enforce Trusted Host Headers</p> <p>### References _Are there any links users can visit to find out more?_</p> <p><strong>Affected:</strong> PyPI: flask-appbuilder</p> <p>### Impact Flask-AppBuilder prior to 4.6.2 would allow for a malicious unauthenticated actor to perform an open redirect by manipulating the Host header in HTTP requests. ### Patches Flask-AppBuilder 4.6.2 introduced the `FAB_SAFE_REDIRECT_HOSTS` configuration variable, which allows administrators to explicitly define which domains are considered safe for redirection.</p> <p>Examples: ``` FAB_SAFE_REDIRECT_HOSTS = [&#34;yourdomain.com&#34;, &#34;sub.yourdomain.com&#34;, &#34;*.yourcompany.com&#34;] ```</p> <p>### Workarounds Use a Reverse Proxy to Enforce Trusted Host Headers</p> <p>### References _Are there any links users can visit to find out more?_</p> https://cve.radiocsirt.org/vuln/ghsa-99pm-ch96-ccp2 https://cve.radiocsirt.org/vuln/pysec-2026-1379 <p><strong>Affected:</strong> PyPI: flask-appbuilder</p> <p>### Impact Flask-AppBuilder prior to 4.6.2 would allow for a malicious unauthenticated actor to perform an open redirect by manipulating the Host header in HTTP requests. ### Patches Flask-AppBuilder 4.6.2 introduced the `FAB_SAFE_REDIRECT_HOSTS` configuration variable, which allows administrators to explicitly define which domains are considered safe for redirection.</p> <p>Examples: ``` FAB_SAFE_REDIRECT_HOSTS = [&#34;yourdomain.com&#34;, &#34;sub.yourdomain.com&#34;, &#34;*.yourcompany.com&#34;] ```</p> <p>### Workarounds Use a Reverse Proxy to Enforce Trusted Host Headers</p> <p>### References _Are there any links users can visit to find out more?_</p> <p><strong>Affected:</strong> PyPI: flask-appbuilder</p> <p>### Impact Flask-AppBuilder prior to 4.6.2 would allow for a malicious unauthenticated actor to perform an open redirect by manipulating the Host header in HTTP requests. ### Patches Flask-AppBuilder 4.6.2 introduced the `FAB_SAFE_REDIRECT_HOSTS` configuration variable, which allows administrators to explicitly define which domains are considered safe for redirection.</p> <p>Examples: ``` FAB_SAFE_REDIRECT_HOSTS = [&#34;yourdomain.com&#34;, &#34;sub.yourdomain.com&#34;, &#34;*.yourcompany.com&#34;] ```</p> <p>### Workarounds Use a Reverse Proxy to Enforce Trusted Host Headers</p> <p>### References _Are there any links users can visit to find out more?_</p> https://cve.radiocsirt.org/vuln/pysec-2026-1379