What’s Vulnerable › Products

pallets flask vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your pallets flask version is affected

Latest pallets flask vulnerabilities

• CVE-2026-27205 — Flask session does not add `Vary: Cookie` header when accessed in some ways (CVSS 4.3)
• CVE-2025-47278 — Flask uses fallback key instead of current signing key (CVSS 1.8)
• CVE-2023-30861 — Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header (CVSS 7.5)
• CVE-2019-1010083 — (CVSS 7.5)
• CVE-2018-1000656 — (CVSS 7.5)