Skip to content
OpenAdvisories

Package · PyPI

flask-security-too

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.1
    CVE-2021-32618 Scanner template

    Open Redirect Vulnerability

    The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow re…

    Flask-Middleware flask-security flask-security-too flask-security Ubuntu PyPI
  • Low —
    GHSA-fxq4-r6mr-9x64

    CSRF Vuln can expose user's QRcode

    ### Impact When a user is setting up two-factor authentication using an authenticator app, a QRcode is generated and made available via a GET request to /tf-qrcode. Since GETs do not have any CSRF protection, it is possible a malicious 3rd party could access …

    flask-security-too PyPI