Latest version: v3.0.0
| CVE/PVE | Vulnerability ID | Advisory | Affected versions | Severity | Severity Score |
|---|---|---|---|---|---|
| PVE-2022-45183 | 45183 |
Flask-security 3.1.0 fixes timing attack on login form. https://gith… |
|
HIDDEN | X.Y |
| PVE-2021-27545 | 27545 |
Flask-security 1.6.0 makes AJAX requests now send a CSRF token for se… |
|
HIDDEN | X.Y |
| CVE-2023-49438 | 65194 |
An open redirect vulnerability in the python package Flask-Security-T… |
|
MEDIUM | 6.1 |
| CVE-2021-23385 | 44501 |
All versions of flask-security are affected by CVE-2021-23385, an ope… |
|
MEDIUM | 6.1 |