All · Flask

Newest first. Every filter here is also a feed: see the subscribe box.

1. 4.3med
   CVE-2026-27205Flask session does not add `Vary: Cookie` header when accessed in some ways

   Flaskpypi
   8 mo ago 2026-02-19
2. 1.8low
   CVE-2025-47278Flask uses fallback key instead of current signing key

   Flaskpypi
   17 mo ago 2025-05-13
3. 7.5high
   CVE-2023-30861Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header

   EPSS 1.3% chance of exploitation in 30 days, percentile 70%EPSS 1.3%Flaskpypi
   3 y ago 2023-05-01
4. 7.5high
   CVE-2019-1010083Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage

   EPSS 1.8% chance of exploitation in 30 days, percentile 79%EPSS 1.8%Flaskpypi
   7 y ago 2019-07-17
5. 7.5high
   CVE-2018-1000656Flask is vulnerable to Denial of Service via incorrect encoding of JSON data

   EPSS 3.9% chance of exploitation in 30 days, percentile 90%EPSS 3.9%Flaskpypi
   8 y ago 2018-08-20