Product by Pallets Click
The Pallets Project Flask
4 known vulnerabilities in The Pallets Project Flask (Pallets Click), 0 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2018-1000656 | The Pallets Projects Flask: Improper Input Validation | 7.5 | |
| High | CVE-2019-1010083 | The Pallets Project Flask: Denial of Service | 7.5 | |
| High | CVE-2023-30861 | Pallets Flask: Use of Persistent Cookies Containing Sensitive Information | 7.5 | |
| Medium | CVE-2026-27205 | Flask session does not add `Vary: Cookie` header when accessed in some ways | 4.3 |