PyPI: flaskcode

CVE-2023-52288

Safety vulnerability ID: SFTY-20240113-88174

Safety legacy ID: pyup.io-64223

Flaskcode is affected by a path traversal vulnerability. An unauthenticated directory traversal, exploitable with a GET request to a /resource-data/<file_path>.txt URI (from views.py), allows attackers to read arbitrary files.

PythonPyPINVDNVDGitHubGHSA
Created at: Jul 5, 2026Updated at: Jul 5, 2026

Overview

Path traversal in flaskcode

Advisory

Flaskcode is affected by a path traversal vulnerability. An unauthenticated directory traversal, exploitable with a GET request to a /resource-data/<file_path>.txt URI (from views.py), allows attackers to read arbitrary files.

Affected Package

Affecting flaskcode package, versions<=0.0.8

Also affects

---

How to Fix

We recommend updating flaskcode to the latest non-vulnerable version.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

References

Safety

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more