UbuntuUpdates.org

Package "python3-flask-cors"

Name: python3-flask-cors

Description:

Flask extension for handling CORS (Python 3)
Latest version: 3.0.8-2ubuntu0.1
Release: focal (20.04)
Level: security
Repository: universe
Head package: python-flask-cors
Homepage: http://flask-cors.corydolphin.com

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "python3-flask-cors"

All arch deb package
APT INSTALL

Other versions of "python3-flask-cors" in Focal

Repository Area Version
base universe 3.0.8-2
updates universe 3.0.8-2ubuntu0.1

Changelog

Version: 3.0.8-2ubuntu0.1 2023-04-13 22:07:16 UTC

  python-flask-cors (3.0.8-2ubuntu0.1) focal-security; urgency=low

  * SECURITY UPDATE: Path traversal in Flask-CORS
    - flask_cors/extension.py: Fix request path normalization, [upstream
      patch by Cory Dolphin] (LP: #2012949)
    - CVE-2020-25032
  * tests/decorator/test_exception_interception.py: Fix FTBFS against
    Flask 1.1+ [upstream patch by Cory Dolphin]

 -- Dalton Durst <email address hidden> Fri, 24 Mar 2023 10:04:01 -0500
2012949 CVE-2020-25032 affects python-flask-cors in focal
CVE-2020-25032 An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources bec


About   -   Send Feedback to @ubuntu_updates