CVE-2019-1010083: PYSEC-2019-179 - The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafte

CVE-2019-1010083 · Severity: low · CVSS 3.1 · Published 2019-07-17

Technologies: flask (PyPI). Vendors: PyPI.

Executive brief

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656.

Affected products

PyPI flask

Related threats

PYSEC-2026-1377 - Flask uses fallback key instead of current signing key
PYSEC-2026-2151 - Flask is a web server gateway interface (WSGI) web application framework. In versions 3.1.2 and below, when the session object is accessed
PYSEC-2023-62 - Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for
PYSEC-2018-66 - The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large