Skip to content
OpenAdvisories

Package · Debian

flask

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2023-30861 Public exploit

    Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header

    Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches `Set-Cookie` he…

    pallets flask flask flask Debian Ubuntu PyPI
  • High 7.5
    CVE-2019-1010083

    Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage

    The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656.

    The Pallets Project Flask flask flask Debian PyPI
  • High 7.5
    CVE-2018-1000656

    Flask is vulnerable to Denial of Service via incorrect encoding of JSON data

    The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provid…

    flask flask flask Debian Ubuntu PyPI