FL
Product
Flask
4
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add Flask to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-30861 | 7.5 | May 2 | Flask is a lightweight WSGI web application framework Affected: before 2.2.5; 2.3.0 before 2.3.2 |
| CVE-2019-1010083 | 7.5 | Jul 17 | The Pallets Project Flask before 1.0 is affected by: unexpected memory usage Affected: before 1.0 |
| CVE-2018-1000656 | 7.5 | Aug 20 | The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly… Affected: before 0.12.3 |
| CVE-2026-27205 | 4.3 | Feb 21 | Flask session does not add `Vary: Cookie` header when accessed in some ways Affected: before 3.1.3 |
Showing 4