https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-6866.htmlhttps://patchthecve.com/cve/CVE-2024-6866.htmlWed, 17 Jun 2026 08:18:52 +0000HIGH 7.5: corydolphin/flask-cors version 4.01 contains a vulnerability where the request path matching is case-insensitive due to the use of the `try_match` function, which is originally intended for matching hosts. This results in a mismatch because paths in URLs are case-sensitive, but the regex matching trhttps://patchthecve.com/cve/CVE-2024-6844.htmlhttps://patchthecve.com/cve/CVE-2024-6844.htmlWed, 17 Jun 2026 08:18:49 +0000MEDIUM 5.3: A vulnerability in corydolphin/flask-cors version 4.0.1 allows for inconsistent CORS matching due to the handling of the '+' character in URL paths. The request.path is passed through the unquote_plus function, which converts the '+' character to a space ' '. This behavior leads to incorrect path nohttps://patchthecve.com/cve/CVE-2024-6839.htmlhttps://patchthecve.com/cve/CVE-2024-6839.htmlWed, 17 Jun 2026 08:18:48 +0000MEDIUM 5.3: corydolphin/flask-cors version 4.0.1 contains an improper regex path matching vulnerability. The plugin prioritizes longer regex patterns over more specific ones when matching paths, which can lead to less restrictive CORS policies being applied to sensitive endpoints. This mismatch in regex pattern