From 825e58eaea5793faf92a0ec07c7395e727a6ff2a Mon Sep 17 00:00:00 2001
From: ahkok <auke-jan.h.kok@intel.com>
Date: Thu, 8 Nov 2018 21:54:11 -0800
Subject: [PATCH] CVE-2018-1000656

 Vulnerable versions: < 0.12.3
Patched version: 0.12.3

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3.
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 632a1ef..464ccae 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1 +1 @@
-Flask==0.10.1
+flask>=0.12.3