Corydolphin Flask-Cors
2 CVEs affecting Corydolphin Flask-Cors. Latest disclosed: 2024-08-18. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-6221 | High | 7.5 | 2024-08-18 | A vulnerability in corydolphin/flask-cors version 4.0.1 allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default. This behavi… |
CVE-2024-1681 | Medium | 5.3 | 2024-04-19 | corydolphin/flask-cors is vulnerable to log injection when the log level is set to debug. An attacker can inject fake log entries into the log file by sending… |