Security: pallets/flask
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Flask session does not add `Vary: Cookie` header when accessed in some waysGHSA-68rp-wp8r-4726 published
Feb 19, 2026 by davidismLow -
fallback key is used instead of current signing keyGHSA-4grg-w6v8-c28g published
May 13, 2025 by davidismLow -
Possible disclosure of permanent session cookie due to missing Vary: Cookie headerGHSA-m2qf-hxjv-5gpq published
May 1, 2023 by davidismHigh