flask-reuploaded vulnerabilities (PyPI)

2 vulnerabilities.

• flask-reuploaded PyPI Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641) CVE-2026-54567 Fix available 7.5 HighJuly 17, 2026
• flask-reuploaded PyPI Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection CVE-2026-27641 Public exploitFix available 9.8 CriticalFebruary 25, 2026