Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-54567
  • github.com/jugmac00/flask-reuploaded
 Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641) 14 Sep
  • Fix available
  • Severity - 7.5 (High)
PYSEC-2026-3466
  • PyPI/flask-reuploaded
 Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641) 23 Jul
  • Fix available
  • Severity - 7.5 (High)
GHSA-937x-gpqr-72gg
  • PyPI/flask-reuploaded
 Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641) 17 Jul
  • Fix available
  • Severity - 7.5 (High)
PYSEC-2026-341
  • PyPI/flask-reuploaded
 Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection 29 Jun
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-65mp-fq8v-56jr
  • PyPI/flask-reuploaded
 Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection 25 Feb
  • Fix available
  • Severity - 9.8 (Critical)
CVE-2026-27641
  • github.com/jugmac00/flask-reuploaded
 Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection 25 Feb
  • Fix available
  • Severity - 9.8 (Critical)