pallets flask vulnerabilities

3 published CVEs name pallets flask among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 1
Critical: 0
Known exploited: 0

Critical 0High 1Medium 0Low 2Not scored 0

CVEs per yearBy the year they were published

20231
20251
20261

Newest CVEs

CVE-2026-27205
Flask session does not add `Vary: Cookie` header when accessed in some ways
pallets · flask
Low2.3
CVE-2025-47278
Flask uses fallback key instead of current signing key
pallets · flask
Low1.8
CVE-2023-30861
Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header
pallets · flask
High7.5

Most common weaknesses