Skip to content

Jugmac00 Flask-reuploaded vulnerabilities

jugmac00 flask-reuploadedFlask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)CVE-2026-54567Fix available7.5 HighJuly 17, 2026
jugmac00 flask-reuploadedFlask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template InjectionCVE-2026-27641Public exploitFix available9.8 CriticalFebruary 25, 2026