Red Hat Security Advisory

RHSA-2020:0870

python-flask security update

Released 2020-03-17 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux 7 Extras python-flask-1:0.10.1-5.el7_7

Fixes 1 record

TI-2018-16009 CVE-2018-1000656 · GHSA-562c-5r94-xh97

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input…

LOW 39

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03855 Published 2018-08-20 Partial fix · 0.12.3 CWE-20