corydolphin corydolphin/flask-cors
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-6866 | unspecified – latest | Case-Insensitive Path Matching in corydolphin/flask-cors | HIGH 7.5 | 0.7 % | ||
| CVE-2024-6844 | unspecified – latest | Inconsistent CORS Matching Due to Handling of '+' in URL Path in corydolphin/flask-cors | MEDIUM 5.3 | 0.3 % | ||
| CVE-2024-6839 | unspecified – latest | Improper Regex Path Matching in corydolphin/flask-cors | MEDIUM 5.3 | 0.7 % | ||
| CVE-2024-6221 | unspecified – < 5.0.0 | Improper Access Control in corydolphin/flask-cors | HIGH 7.5 | 0.7 % | ||
| CVE-2024-1681 | unspecified – latest | Log Injection Vulnerability in corydolphin/flask-cors | MEDIUM 5.3 | 0.6 % |