Skip to content
OpenAdvisories
Medium DLA-3545-1 1 CVE

flask-security - security update

Published Aug 28, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 flask-security 1.7.5-2+deb10u1

Vulnerabilities 1

  • Medium 5.4
    CVE-2021-23385

    Open Redirect

    This affects all versions of package Flask-Security. When using the get_post_logout_redirect and get_post_login_redirect functions, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\\e…

    flask-security flask-security flask-security Debian Ubuntu PyPI