Login Request a demo
FL
Product
Flask-AppBuilder
by dpgaspar · last CVE Sep 11, 2025
13
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 1High 2Medium 9Low 1
Severity
All severities13Critical1High2Medium9Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Flask-AppBuilder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-25128
9.1
1%
Feb 29
Flask-AppBuilder is an application development framework, built on top of Flask
Affected: before 4.3.11
CVE-2021-41265
8.8
1%
Dec 9
Flask-AppBuilder is a development framework built on top of Flask
Affected: before 3.3.4
CVE-2023-29005
7.5
1%
Apr 10
Flask-AppBuilder versions before 4.3.0 lack rate limiting which can allow an attacker to brute-force user credentials
Affected: before 4.3.0
CVE-2025-58065
6.5
0%
Sep 11
Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods
Affected: < 4.8.1
CVE-2025-32962
6.1
0%
May 16
Flask-AppBuilder open redirect vulnerability using HTTP host injection
Affected: < 4.6.2
CVE-2024-27083
6.1
1%
Feb 29
Flask-AppBuilder is an application development framework, built on top of Flask
Affected: 4.1.4 before 4.2.1
CVE-2022-24776
6.1
1%
Mar 24
Flask-AppBuilder is an application development framework, built on top of the Flask web framework
Affected: before 3.4.5
CVE-2021-32805
6.1
1%
Sep 8
Flask-AppBuilder is an application development framework, built on top of Flask
Affected: before 3.3.2
CVE-2024-45314
5.5
0%
Sep 4
Flask-AppBuilder login form allows browser to cache sensitive fields
Affected: < 4.5.1
CVE-2025-24023
5.3
0%
Mar 3
Observable Response Discrepancy in flask-appbuilder
Affected: < 4.5.3
CVE-2022-21659
5.3
1%
Jan 31
Flask-AppBuilder is an application development framework, built on top of the Flask web framework
Affected: before 3.4.2
CVE-2021-29621
5.3
3%
Jun 7
Flask-AppBuilder is a development framework, built on top of Flask
Affected: through 3.2.3
CVE-2022-31177
2.7
1%
Aug 1
Possible to infer sensitive information through query strings in Flask-AppBuilder
Affected: < 4.1.3
Showing 13