dpgaspar vulnerabilities

CVEs per yearBy the year they were published

1. 20213
2. 20222
3. 20232
4. 20243
5. 20253

Newest CVEs

• CVE-2025-58065

  Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods

  dpgaspar · Flask-AppBuilder

  Medium6.5
• CVE-2025-32962

  Flask-AppBuilder open redirect vulnerability using HTTP host injection

  dpgaspar · Flask-AppBuilder

  Medium4.3
• CVE-2025-24023

  Observable Response Discrepancy in flask-appbuilder

  dpgaspar · Flask-AppBuilder

  Low3.7
• CVE-2024-45314

  Flask-AppBuilder login form allows browser to cache sensitive fields

  dpgaspar · Flask-AppBuilder

  Low3.6
• CVE-2024-27083

  Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS)

  dpgaspar · Flask-AppBuilder

  Medium4.3
• CVE-2024-25128

  Flask-AppBuilder incorrect authentication when using auth type OpenID

  dpgaspar · Flask-AppBuilder

  Critical9.1
• CVE-2023-34110

  Flask-AppBuilder vulnerable to possible disclosure of sensitive information on user error

  dpgaspar · Flask-AppBuilder

  Low2.7
• CVE-2023-29005

  No Rate Limiting on Login AUTH DB

  dpgaspar · Flask-AppBuilder

  High7.5
• CVE-2022-31177

  Possible to infer sensitive information through query strings in Flask-AppBuilder

  dpgaspar · Flask-AppBuilder

  Low2.7
• CVE-2022-24776

  Open Redirect in Flask-AppBuilder

  dpgaspar · Flask-AppBuilder

  Medium6.1