ROOT-APP-PYPI-CVE-2025-58065 CVE-2025-58065 in rootio-Flask-AppBuilder - Patched by Root

Root has patched CVE-2025-58065 in the rootio-Flask-AppBuilder package for Root:PyPI. Multiple fixed versions available...

CVE-2022-31177

Flask-AppBuilder is an application development framework built on top of Flask python framework. In versions prior to 4.1.3 an authenticated Admin user could query other users by their salted and hashed passwords strings. These filters could be made by using partial hashed password strings. The...

EUVD-2021-0082

Malware in sbrugna...

EUVD-2021-0081

Malware in sbrugna...

EUVD-2021-0083

Malware in sbrugna...

EUVD-2025-15450

Malicious code in bioql PyPI...

EUVD-2022-0103

Malicious code in bioql PyPI...

EUVD-2022-1268

Malicious code in bioql PyPI...

EUVD-2022-0104

Malicious code in bioql PyPI...

EUVD-2025-5564

Malicious code in bioql PyPI...

EUVD-2024-0631

Malicious code in bioql PyPI...

EUVD-2024-2784

Malicious code in bioql PyPI...

EUVD-2024-0659

Malicious code in bioql PyPI...

EUVD-2023-1250

Malicious code in bioql PyPI...

EUVD-2023-0078

Malicious code in bioql PyPI...

EUVD-2025-28980

Malicious code in bioql PyPI...

CVE-2025-58065

Flask-AppBuilder is an application development framework. Prior to version 4.8.1, when Flask-AppBuilder is configured to use OAuth, LDAP, or other non-database authentication methods, the password reset endpoint remains registered and accessible, despite not being displayed in the user interface...

abi-ds-utils (1.0.1), acceldata-o2a (1.0.0) +138 more potentially affected by CVE-2025-58065 via flask-appbuilder (>=4.1.2, <=4.6.3)

flask-appbuilder PYPI version =4.1.2, =0.9.5.1rc1, =1.4.0.3.post4, =1.4.0.3.post3, =0.2.1, =0.4.0, =0.1.0a1, =0.8.2, =0.1.1, =0.1.1, =1.10.6 - airflow-cyberark-secrets-backend 0.1.0 - airflow-dagfactory 0.19.1 and more Source cves: CVE-2025-58065 Source advisory: SNYK:PYTHON-FLASKAPPBUILDER-12670...

Improper Authentication

Overview Flask-AppBuilder is a simple and rapid application development framework, built on top of Flask. includes detailed security, auto CRUD generation for your models, google charts and much more. Affected versions of this package are vulnerable to Improper Authentication via the reset my...

CVE-2025-58065

Flask-AppBuilder is an application development framework. Prior to version 4.8.1, when Flask-AppBuilder is configured to use OAuth, LDAP, or other non-database authentication methods, the password reset endpoint remains registered and accessible, despite not being displayed in the user interface...