https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 01 Nov 2026 06:36:35 +0000 https://db.gcve.eu/vuln/cve-2020-25032 <p>An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.</p> <p>An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.</p> https://db.gcve.eu/vuln/cve-2020-25032 https://db.gcve.eu/vuln/usn-6019-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: python-flask-cors</p> <p>It was discovered that Flask-CORS did not properly escape paths before evaluating resource rules. An attacker could possibly use this to expose sensitive information.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: python-flask-cors</p> <p>It was discovered that Flask-CORS did not properly escape paths before evaluating resource rules. An attacker could possibly use this to expose sensitive information.</p> https://db.gcve.eu/vuln/usn-6019-1