LOWPyPI
GHSA-4grg-w6v8-c28g· CVE-2025-47278, PYSEC-2026-1377Flask uses fallback key instead of current signing key
Modified: 9/10/2026
package
pkg:pypi/flask
Flask uses fallback key instead of current signing key
Modified: 9/10/2026
Flask is vulnerable to Denial of Service via incorrect encoding of JSON data
Modified: 2/21/2025
Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage
Modified: 9/20/2024
Flask session does not add `Vary: Cookie` header when accessed in some ways
Modified: 9/10/2026
Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header
Modified: 9/10/2026
Modified: 11/8/2023
Modified: 11/8/2023
Modified: 11/8/2023
Flask uses fallback key instead of current signing key
Modified: 7/7/2026
Modified: 7/13/2026