What is GHSA-5wv5-4vpf-pj6m?

GHSA-5wv5-4vpf-pj6m is a security advisory published by GitHub Security Advisories with High severity. Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage

Which CVE IDs does GHSA-5wv5-4vpf-pj6m cover?

GHSA-5wv5-4vpf-pj6m covers the following CVE IDs: CVE-2019-1010083. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5wv5-4vpf-pj6m?

GHSA-5wv5-4vpf-pj6m has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-5wv5-4vpf-pj6m?

GHSA-5wv5-4vpf-pj6m affects 1 product, including: pip/flask:\u003c 1.0.

GHSA-5wv5-4vpf-pj6mHighCVSS 7.5

Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage

Vendor

GitHub Security Advisories

Published

July 19, 2019

Last Modified

July 23, 2025

🔗 CVE IDs covered (1)

CVE-2019-1010083 →

📋 Description

The Pallets Project Flask before 1.0 is affected by unexpected memory usage. The impact is denial of service. The attack vector is crafted encoded JSON data. The fixed version is 1. NOTE this may overlap CVE-2018-1000656.

🎯 Affected products1

pip/flask:< 1.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2019-1010083
https://github.com/advisories/GHSA-5wv5-4vpf-pj6m
https://github.com/pypa/advisory-database/tree/main/vulns/flask/PYSEC-2019-179.yaml
https://www.palletsprojects.com/blog/flask-1-0-released