MEDIUM6.1PyPI
GHSA-2ccw-7px8-vmpf· CVE-2022-24776, PYSEC-2026-635Open Redirect in Flask-AppBuilder
Modified: 7/6/2026
package
PyPI/flask-appbuilder
pkg:pypi/flask-appbuilder
LOW2.7PyPI
GHSA-32ff-4g79-vgfc· CVE-2022-31177, PYSEC-2022-247Flask-AppBuilder before v4.1.3 allows inference of sensitive information through query strings
Modified: 3/7/2025
MEDIUM5.3PyPI
GHSA-434h-p4gx-jm89· BIT-airflow-2021-29621, CVE-2021-29621Observable Response Discrepancy in Flask-AppBuilder
Modified: 7/8/2026
HIGH7.2PyPI
GHSA-624f-cqvr-3qw4· CVE-2021-32805, PYSEC-2021-359Flask-AppBuilder Open Redirect vulnerability
Modified: 7/8/2026
MEDIUM6.5PyPI
GHSA-765j-9r45-w2q2· CVE-2025-58065, PYSEC-2026-1378Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods
Modified: 9/10/2026
MEDIUM4.3PyPI
GHSA-99pm-ch96-ccp2· CVE-2025-32962, PYSEC-2026-1379Flask-AppBuilder open redirect vulnerability using HTTP host injection
Modified: 9/10/2026
HIGH7.5PyPI
GHSA-9hcr-9hcv-x6pv· CVE-2023-29005, PYSEC-2026-1380Flask-AppBuilder Has No Rate Limiting on Login AUTH DB
Modified: 7/7/2026
MEDIUM4.3PyPI
GHSA-fqxj-46wg-9v84· CVE-2024-27083, PYSEC-2026-1381Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS)
Modified: 9/10/2026
LOW3.6PyPI
GHSA-fw5r-6m3x-rh7p· CVE-2024-45314, PYSEC-2026-1382Flask-AppBuilder's login form allows browser to cache sensitive fields
Modified: 9/10/2026
CRITICAL9.1PyPI
GHSA-j2pw-vp55-fqqj· CVE-2024-25128, PYSEC-2026-340Flask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID
Modified: 9/10/2026
LOW2.7PyPI
GHSA-jhpr-j7cq-3jp3· CVE-2023-34110, PYSEC-2023-94Flask-AppBuilder vulnerable to possible disclosure of sensitive information on user error
Modified: 2/21/2025
HIGH8.1PyPI
GHSA-m3rf-7m4w-r66q· CVE-2021-41265, PYSEC-2021-851Improper Authentication in Flask-AppBuilder
Modified: 7/8/2026
LOW3.7PyPI
GHSA-p8q5-cvwx-wvwp· CVE-2025-24023, PYSEC-2025-15Flask-AppBuilder Observable Response Discrepancy
Modified: 9/10/2026
MEDIUM5.3PyPI
GHSA-wfjw-w6pv-8p7f· CVE-2022-21659, PYSEC-2022-24Observable Response Discrepancy in Flask-AppBuilder
Modified: 9/10/2026
—PyPI
PYSEC-2021-359· CVE-2021-32805, GHSA-624f-cqvr-3qw4Modified: 11/8/2023
—PyPI
PYSEC-2021-851· CVE-2021-41265, GHSA-m3rf-7m4w-r66qModified: 11/8/2023
—PyPI
PYSEC-2021-90· BIT-airflow-2021-29621, CVE-2021-29621Modified: 12/6/2023
—PyPI
PYSEC-2022-24· CVE-2022-21659, GHSA-wfjw-w6pv-8p7fModified: 11/8/2023
—PyPI
PYSEC-2022-247· CVE-2022-31177, GHSA-32ff-4g79-vgfcModified: 11/8/2023
—PyPI
PYSEC-2023-94· CVE-2023-34110, GHSA-jhpr-j7cq-3jp3Modified: 11/8/2023
MEDIUM5.3PyPI
PYSEC-2025-15· CVE-2025-24023, GHSA-p8q5-cvwx-wvwpModified: 4/9/2025
MEDIUM6.5PyPI
PYSEC-2026-1378· CVE-2025-58065, GHSA-765j-9r45-w2q2Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods
Modified: 7/7/2026
MEDIUM4.3PyPI
PYSEC-2026-1379· CVE-2025-32962, GHSA-99pm-ch96-ccp2Flask-AppBuilder open redirect vulnerability using HTTP host injection
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-1380· CVE-2023-29005, GHSA-9hcr-9hcv-x6pvFlask-AppBuilder Has No Rate Limiting on Login AUTH DB
Modified: 7/7/2026
MEDIUM4.3PyPI
PYSEC-2026-1381· CVE-2024-27083, GHSA-fqxj-46wg-9v84Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS)
Modified: 7/7/2026
LOW3.6PyPI
PYSEC-2026-1382· CVE-2024-45314, GHSA-fw5r-6m3x-rh7pFlask-AppBuilder's login form allows browser to cache sensitive fields
Modified: 7/7/2026
CRITICAL9.1PyPI
PYSEC-2026-340· CVE-2024-25128, GHSA-j2pw-vp55-fqqjFlask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID
Modified: 7/1/2026
MEDIUM6.1PyPI
PYSEC-2026-635· CVE-2022-24776, GHSA-2ccw-7px8-vmpfOpen Redirect in Flask-AppBuilder
Modified: 7/6/2026