Product by Pallets
Flask
3 known vulnerabilities in Flask (Pallets), 0 of them actively exploited (CISA KEV).
Key figures
3
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-30861 | Pallets Flask: Use of Persistent Cookies Containing Sensitive Information | 7.5 | |
| Medium | CVE-2026-27205 | Flask session does not add `Vary: Cookie` header when accessed in some ways | 4.3 | |
| Low | CVE-2025-47278 | Flask uses fallback key instead of current signing key | — |