Skip to content
OpenAdvisories

Vendor

flaskbb

3 known vulnerabilities.

Products

flaskbb 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-46556

    FlaskBB: SSRF in get_image_info() via unrestricted avatar URL

    FlaskBB is a Forum Software written in Python using the micro framework Flask. Prior to version 2.2.1, a Server-Side Request Forgery (SSRF) vulnerability in get_image_info() allows any authenticated user to force the server to send HTTP requests to arbitrary …

    flaskbb flaskbb flaskbb PyPI