Corydolphin
5 CVEs across 2 Corydolphin products. Browse Corydolphin vulnerabilities, severities, and proof-of-concept exploits.
Corydolphin products with known CVEs
Corydolphin CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-6866 | High | 7.5 | 2025-03-20 | corydolphin/flask-cors version 4.01 contains a vulnerability where the request path matching is case-insensitive due to the use of the `try_match` function, wh… |
CVE-2024-6844 | Medium | 5.3 | 2025-03-20 | A vulnerability in corydolphin/flask-cors version 4.0.1 allows for inconsistent CORS matching due to the handling of the '+' character in URL paths. The reques… |
CVE-2024-6839 | Medium | 5.3 | 2025-03-20 | corydolphin/flask-cors version 4.0.1 contains an improper regex path matching vulnerability. The plugin prioritizes longer regex patterns over more specific on… |
CVE-2024-6221 | High | 7.5 | 2024-08-18 | A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default. This behavi… |
CVE-2024-1681 | Medium | 5.3 | 2024-04-19 | corydolphin/flask-cors is vulnerable to log injection when the log level is set to debug. An attacker can inject fake log entries into the log file by sending… |