corydolphin/flask-cors version 4.01 contains a vulnerability where the request path matching is case-insensitive due to the use of

A vulnerability in corydolphin/flask-cors version 4.0.1 allows for inconsistent CORS matching due to the handling of the '+' chara

corydolphin/flask-cors version 4.0.1 contains an improper regex path matching vulnerability. The plugin prioritizes longer regex p

A vulnerability in corydolphin/flask-cors version 4.0.1 allows the Access-Control-Allow-Private-Network CORS header to be set to

corydolphin/flask-cors is vulnerable to log injection when the log level is set to debug. An attacker can inject fake log entries

An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access pr