Pallets · Flask · CVE-2018-1000656
**Name of the Vulnerable Software and Affected Versions**
Flask versions prior to 0.12.3
**Description**
The issue is related to improper input validation, which can result in a large amount of memory usage, possibly leading to denial of service. This can be exploited when an attacker provides JSON data in incorrect encoding.
**Recommendations**
For versions prior to 0.12.3, update to version 0.12.3 to resolve the issue. As a temporary workaround, consider restricting the handling of JSON data with incorrect encoding to minimize the risk of exploitation.