TI-2026-21640 CVE-2026-27205 · GHSA-68rp-wp8r-4726
Flask session does not add `Vary: Cookie` header when accessed in some ways
Priority LOW 12
Flask is a web server gateway interface (WSGI) web application framework.
Vulnerabilities
4 records
TI-2023-14640 CVE-2023-30861 · GHSA-m2qf-hxjv-5gpq
Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header
Priority LOW 35
Flask is a lightweight WSGI web application framework.
TI-2019-15971 CVE-2019-1010083 · GHSA-5wv5-4vpf-pj6m
Uncontrolled resource consumption in Pallets Project Flask
Priority LOW 36
The Pallets Project Flask before 1.0 is affected by: unexpected memory usage.
TI-2018-16009 CVE-2018-1000656 · GHSA-562c-5r94-xh97
The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input…
Priority LOW 39
The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service.