Palletsprojects / Flask

4 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-27205	Flask session does not add `Vary: Cookie` header when accessed in some ways	LOW	2.3	Feb 21, 2026
CVE-2023-30861	Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header	HIGH	8.7	May 2, 2023
CVE-2019-1010083	python-flask: unexpected memory usage can lead to denial of service via crafted encoded JSON data	HIGH	8.7	Jul 17, 2019
CVE-2018-1000656	python-flask: Denial of Service via crafted JSON file	HIGH	8.7	Aug 20, 2018

Rows per page

Showing 1 to 4 of 4 CVEs