PA
Vendor
pallets
6
CVEs
0
On KEV
1
New 30D
Products
WE6.3
werkzeug
pallets
3 CVEs0 on KEV1 new
JI8.8
jinja
pallets
2 CVEs0 on KEV0 new
FL4.3
flask
pallets
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102598 | WE werkzeug pallets | 6.3 | Sep 29 | Werkzeug safe_join() allows Windows special device names |
| CVE-2026-27205 | FL flask pallets | 4.3 | Feb 21 | Flask session does not add `Vary: Cookie` header when accessed in some ways |
| CVE-2026-27199 | WE werkzeug pallets | 5.3 | Feb 21 | Werkzeug safe_join() allows Windows special device names |
| CVE-2026-21860 | WE werkzeug pallets | 5.3 | Jan 8 | Werkzeug safe_join() allows Windows special device names with compound extensions |
| CVE-2024-56326 | JI jinja pallets | 7.8 | Dec 23 | Jinja has a sandbox breakout through indirect reference to format method |
| CVE-2024-56201 | JI jinja pallets | 8.8 | Dec 23 | Jinja has a sandbox breakout through malicious filenames |