flask-reuploaded vulnerabilities
CVEs whose affected-version data names the flask-reuploaded package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-54567High· 7.5PoCFlask-Reuploaded provides file uploads for Flask
Flask-Reuploaded provides file uploads for Flask. From 1.5.0 until 1.6.0, UploadSet.save(storage, name=...) in src/flask_uploads/flask_uploads.py applies lowercase_ext to the default upload path but uses the case-preserving extension hel…
▾ Midnightjugmac00 · flask-reuploadedEPSS 0.63%via NVD
CVE-2026-27641Critical· 9.8PoCFlask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection
Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection
▾ Abyssalflask-reuploaded · flask-reuploadedEPSS 1.3%via OSV