TuxCare rebuilt flask-cors to address 4 CVEs. Fixed in 5.0.1.post1+tuxcare.
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/pypi/CLSA-2026-1789123062.json"