flask
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Flask uses fallback key instead of current signing key | flask | PyPI | Low | Fix reported | |
| Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header | flaskRed Hat Ceph Storage 3/python-flask | PyPIRed Hat | High | Fix reported | |
| Flask session does not add `Vary: Cookie` header when accessed in some ways | flaskRed Hat OpenShift AI (RHOAI)/rhoai/odh-kf-notebook-controller-rhel8 | PyPIRed Hat | Low | Fix reported | |
| Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage | flaskRed Hat Ceph Storage 2/python-flask | PyPIRed Hat | High | Fix reported | |
| Flask is vulnerable to Denial of Service via incorrect encoding of JSON data | flaskRed Hat Ceph Storage 2/python-flask | PyPIRed Hat | High | Fix reported |