HuntersHunters
Sign inStart free
All projects

Security context

What an agent needs to avoid regressing past fixes — and find the next bug in this project.

Flask
pallets/flask

Lightweight WSGI web application framework.

PyPI · flask
10
Advisories
10
CVEs
High
Peak severity
9
With fix diff

Distribution

By severity

High
3
Medium
1
Low
2
Unrated
4

By weakness class

Other
8
Denial of Service
1
Improper Validation
1

Every fixed vulnerability (10)

High3 fixed
HighFlask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header3y agoHighPallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage6y agoHighFlask is vulnerable to Denial of Service via incorrect encoding of JSON data7y ago
Medium1 fixed
MediumFlask is a web server gateway interface (WSGI) web application framework. In versions 3.1.2 and below, when the session object is accessed, Flask should set the Vary: Cookie header., resulting in a Us4mo ago
Low2 fixed
LowFlask session does not add `Vary: Cookie` header when accessed in some ways4mo agoLowFlask uses fallback key instead of current signing key1y ago
Unrated4 fixed
UnratedFlask uses fallback key instead of current signing key9d agoUnratedFlask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy3y agoUnratedThe Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may7y agoUnratedThe Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of servic7y ago