Skip to content
OpenAdvisories
High USN-4378-1 1 CVE

flask vulnerability

Published Jun 1, 2020 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Flask incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a denial of service.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS flask 0.10.1-2ubuntu0.1
Ubuntu · 18.04 LTS 18.04:LTS flask 0.12.2-3ubuntu0.1
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS flask 0.10.1-2ubuntu0.1~esm1

Vulnerabilities 1

  • High 7.5
    CVE-2018-1000656

    Flask is vulnerable to Denial of Service via incorrect encoding of JSON data

    The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provid…

    flask flask flask Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2018-1000656