FL
Product
Flask
by Palletsprojects · last CVE Feb 21, 2026
4
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch

Add Flask to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-27205
4.3
0%
Feb 21
Flask session does not add `Vary: Cookie` header when accessed in some ways
Affected: before 3.1.3
Showing 1