Executive brief
Flask-CORS allows for inconsistent CORS matching
Affected products
- PyPI Flask-Cors
Junglewise Threat Intelligence
CVE-2024-6844: PYSEC-2026-1385 - Flask-CORS allows for inconsistent CORS matching
CVE-2024-6844 · Severity: low · CVSS 3 · Published 2026-07-07
Technologies: Flask-Cors (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1384 - Flask-CORS improper regex path matching vulnerability
- PYSEC-2026-1383 - Flask-CORS vulnerable to Improper Handling of Case Sensitivity
- Flask-Cors improper access control in Private Network Access header
- corydolphin flask-cors log injection in debug mode
- PYSEC-2020-43 - An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private reso