Skip to content
OpenAdvisories

Vendor

miguelgrinberg

6 known vulnerabilities.

Products

python-socketio 2 python-engineio 2 Flask-HTTPAuth 1 microdot 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-34531

    Flask-HTTPAuth invokes token verification callback when missing or empty token was given by client

    Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes. Prior to version 4.8.1, in a situation where the client makes a request to a token protected resource without passing a token, or passing an empty token, Flask-HTTPAuth woul…

    miguelgrinberg Flask-HTTPAuth python-flask-httpauth flask-httpauth Debian Ubuntu PyPI
  • Medium 6.4
    CVE-2025-61765 Public exploit

    python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments

    python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserializatio…

    miguelgrinberg python-socketio open-webui reflex Debian Ubuntu Wolfi PyPI