Skip to content
OpenAdvisories
High DLA-3536-1 1 CVE

flask - security update

Published Aug 20, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 flask 1.0.2-3+deb10u1

Vulnerabilities 1

  • High 7.5
    CVE-2023-30861 Public exploit

    Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header

    Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches `Set-Cookie` he…

    pallets flask python-flask flask Debian Ubuntu Azure Linux PyPI