flask vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-27205Lowflask: Flask session does not add `Vary: Cookie` header when accessed in some ways CVE-2025-47278Lowflask: Flask uses fallback key instead of current signing key CVE-2023-30861Highflask: Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header CVE-2019-1010083Highflask: Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage CVE-2018-1000656Highflask: Flask is vulnerable to Denial of Service via incorrect encoding of JSON data

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.