Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fe80003d by Salvatore Bonaccorso at 2025-06-11T09:10:24+02:00
Update information for CVE-2024-6839/python-flask-cors
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -27051,12 +27051,13 @@ CVE-2024-6841 (A Cross-Site Request Forgery (CSRF)
vulnerability exists in the l
NOT-FOR-US: Vanna-ai
CVE-2024-6839 (corydolphin/flask-cors version 4.0.1 contains an improper regex
path m ...)
{DLA-4197-1}
- - python-flask-cors 6.0.0-1 (bug #1100988)
+ - python-flask-cors 6.0.1-1 (bug #1100988)
[bookworm] - python-flask-cors <postponed> (Minor issue, revisit when
fixed upstream)
NOTE: https://huntr.com/bounties/403eb1fc-86f4-4820-8eba-0f3dfae9f2b4
NOTE: https://github.com/advisories/GHSA-7rxf-gvfg-47g4
NOTE: Fixed by:
https://github.com/corydolphin/flask-cors/commit/e970988bea563e05e8b8f53fa7bcc134b5bf5c5f
(6.0.0)
NOTE: Follow up for incomplete fix:
https://github.com/corydolphin/flask-cors/pull/392
+ NOTE: Fixed by:
https://github.com/corydolphin/flask-cors/commit/4ad56d6c20252d36031c74ba8386a81e94286f40
(6.0.1.dev)
CVE-2024-6838 (In mlflow/mlflow version v2.13.2, a vulnerability exists that
allows t ...)
NOT-FOR-US: mlflow
CVE-2024-6829 (A vulnerability in aimhubio/aim version 3.19.3 allows an
attacker to e ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe80003d8348cc83eaaad18907d05d8ebb2d5cb8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe80003d8348cc83eaaad18907d05d8ebb2d5cb8
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
