python3-flask-cors: corydolphin/flask-cors version 4.01 contains a vulnerability where therequest path matching is case-insensitive due t...

corydolphin/flask-cors version 4.01 contains a vulnerability where therequest path matching is case-insensitive due to the use of the `try_match`function, which is originally intended for matching hosts. This results ina mismatch because paths in URLs are case-sensitive, but the regex matchingtreats them as case-insensitive. This misconfiguration can lead tosignificant security vulnerabilities, allowing unauthorized origins toaccess paths meant to be restricted, resulting in data exposure andpotential data leaks.

Where it's fixed