- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 14 · 1 critical, 3 high, 6 medium, 4 low
- Registry
- PyPI
Advisories 14
- CVE-2025-58065Medium 6.5
Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods
Affected: fixed in 4.8.1.
- CVE-2025-32962Medium 4.3
Flask-AppBuilder open redirect vulnerability using HTTP host injection
Affected: fixed in 4.6.2.
- CVE-2025-24023Low 3.7
Observable Response Discrepancy in flask-appbuilder
Affected: fixed in 4.5.3.
- CVE-2024-45314Low 3.6
Flask-AppBuilder login form allows browser to cache sensitive fields
Affected: fixed in 4.5.1.
- CVE-2024-27083Medium 4.3
Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS)
Affected: from 4.1.4, fixed in 4.2.1.
- CVE-2024-25128Critical 9.1
Flask-AppBuilder incorrect authentication when using auth type OpenID
Affected: fixed in 4.3.11.
- CVE-2023-34110Low 2.7
Flask-AppBuilder vulnerable to possible disclosure of sensitive information on user error
Affected: fixed in 4.3.2.
- CVE-2023-29005High 7.5
No Rate Limiting on Login AUTH DB
Affected: fixed in 4.3.0.
- CVE-2022-31177Low 2.7
Possible to infer sensitive information through query strings in Flask-AppBuilder
Affected: fixed in 4.1.3.
- CVE-2022-24776Medium 6.1
Open Redirect in Flask-AppBuilder
Affected: fixed in 3.4.5.
- CVE-2022-21659Medium 5.3
Observable Response Discrepancy in Flask-AppBuilder
Affected: fixed in 3.4.2; fixed in 3.4.4.
- CVE-2021-41265High 8.1
Improper Authentication in Flask-AppBuilder
Affected: fixed in 3.3.4.
- CVE-2021-32805High 7.2
URL Redirection to Untrusted Site ('Open Redirect') in Flask-AppBuilder
Affected: fixed in 3.3.2.
- CVE-2021-29621Medium 5.3
Observable Response Discrepancy in Flask-AppBuilder
Affected: fixed in 3.3.0.