CVE-2025-55737 — flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, when deleting a comment, there's no validation of the ownership of the comment. Every user can delete an arbitrary comment of anothe — CVE Database · The Intelligence Room