diff --git a/flask-cors-4.0.1.tar.gz b/flask-cors-4.0.1.tar.gz
deleted file mode 100644
index c108df0529e3048676a8cf5b91a471f9cb809844..0000000000000000000000000000000000000000
Binary files a/flask-cors-4.0.1.tar.gz and /dev/null differ
diff --git a/flask-cors.spec b/flask-cors.spec
index bcc24311b0bfdc5c8b1278da442a29e20fcd056e..3647e3767e0a3f212125d99f37016e988ffdda61 100755
--- a/flask-cors.spec
+++ b/flask-cors.spec
@@ -1,11 +1,11 @@
 %global _empty_manifest_terminate_build 0
 Name:		python-Flask-Cors
-Version:	4.0.1
+Version:	5.0.0
 Release:	1
 Summary:	A Flask extension adding a decorator for CORS support
 License:	MIT
 URL:		https://github.com/corydolphin/flask-cors
-Source0:	https://files.pythonhosted.org/packages/c8/b0/bd7130837a921497520f62023c7ba754e441dcedf959a43e6d1fd86e5451/flask-cors-4.0.1.tar.gz
+Source0:	https://files.pythonhosted.org/packages/source/F/Flask-Cors/flask_cors-%{version}.tar.gz
 BuildArch:	noarch
 
 Requires:	python3-Flask
@@ -30,7 +30,7 @@ Provides:	python3-Flask-Cors-doc
 A Flask extension for handling Cross Origin Resource Sharing (CORS), making cross-origin AJAX possible.
 
 %prep
-%autosetup -n flask-cors-4.0.1 -p1
+%autosetup -n flask_cors-%{version} -p1
 
 %build
 %py3_build
@@ -70,6 +70,11 @@ mv %{buildroot}/doclist.lst .
 %{_docdir}/*
 
 %changelog
+* Wed Sep 18 2024 yaoxin <yao_xin001@hoperun.com> - 5.0.0-1
+- Update to 5.0.0:
+  * Breaking: Change default to disable private network access
+    This effectively resolves GHSA-hxwh-jpp2-84pm https://osv.dev/vulnerability/PYSEC-2024-71
+
 * Thu Jun 06 2024 liuzhilin <liuzhilin@kylinos.cn> - 4.0.1-1
 - update to 4.0.1
 - Fix Read the Docs builds.
diff --git a/flask_cors-5.0.0.tar.gz b/flask_cors-5.0.0.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..4c9fdfb0b7efb21d71c8098fe027b698e9592b80
Binary files /dev/null and b/flask_cors-5.0.0.tar.gz differ