WhisperX tag archive

#CWE-489

This page collects WhisperX intelligence signals tagged #CWE-489. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.

Latest Signals (1)

The Lab · 2026-03-26 15:27:14 · GitHub Issues

1. Flask Security Flaw: Top-Level app.run() in 'bad/vulpy-ssl.py' Bypasses Guard, Risks Accidental Exposure

A critical security misconfiguration has been flagged in a Python Flask application, where the `app.run()` command is executed at the top level of the script. This pattern bypasses the standard `if __name__ == '__main__':` guard, creating a direct risk of the development server starting unintentionally when the module ...