Flask security vulnerabilities
Developer framework / library. Public CVE monitoring for Flask. Vendor security advisories are linked on this page.
Built for Operators of this product.
7 public records · 0 security-fix timeline events. 0 published in the last 7 days. 6 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 0
- High 0
- Medium 0
- Low 0
2026-08-080 issues2026-11-05
Known exploited
View all known exploitedNo records match this view.
Recently published
Browse catalog- Critical9.8Flask-Reuploaded provides file uploads for Flask.Check if you run itEPSS 1.34%Feb 25, 2026
- Medium6.5Flask-AppBuilder is an application development framework.Check if you run itEPSS 0.43%Sep 11, 2025
- Medium4.3Flask-AppBuilder is an application development framework built on top of Flask.Check if you run itEPSS 0.23%May 16, 2025
- High7.5Possible disclosure of permanent session cookie due to missing Vary: Cookie headerCheck if you run itEPSS 1.25%May 1, 2023
- Medium5.3Flask-AppBuilder is a development framework, built on top of Flask.Check if you run itEPSS 3.40%Jun 7, 2021