CVE-2021-32838: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

Flask-RESTX (pypi package flask-restx) is a community driven fork of Flask-RESTPlus. Flask-RESTX before version 0.5.1 is vulnerable to ReDoS (Regular Expression Denial of Service) in email_regex. This is fixed in version 0.5.1.

Affected products

• Fedoraproject Fedora: version 33 only; version 34 only
• Flask-Restx Project Flask-Restx: before 0.5.1 (fixed in 0.5.1)

Published 2021-09-20. Last modified 2026-06-17.