CVE-2026-27205

Flask is a web server gateway interface WSGI web application framework. In versions 3.1.2 and below, when the session object is accessed, Flask should set the Vary: Cookie header., resulting in a Use of Cache Containing Sensitive Information vulnerability. The logic instructs caches not to cache...

flask-autocrud (2.1.0), miscan (1.1.1) potentially affected by CVE-2026-27199 via werkzeug (0.15.0)

werkzeug PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - flask-autocrud 2.1.0 - miscan 1.1.1 Source cves: CVE-2026-27199 Source advisory: OSV:PYSEC-2026-2320...

actinia-core (>=4.9.1, <=4.10.0), adeso (>=0.0.1, <=0.0.4) +106 more potentially affected by CVE-2026-27205 via flask (2.3.2)

flask PYPI version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - actinia-core =4.9.1, =0.0.1, =4.1.2, =9.1.32, =1.7.5, =0.1.0, =0.1.0, =0.2.0, =0.1.6, =0.1.0, =1.56.0.post1, =1.1.0, =1.3.4 and more Source cves:...

adop (>=0.0.1a1, <=0.0.1a5), analogic-framework (>=4.0.2, <=4.1.1) +67 more potentially affected by CVE-2026-27205 via flask (2.1.2)

flask PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - adop =0.0.1a1, =4.0.2, =2.6.0, =1.0.5, =3.1.0, =1.0.0, =1.0.1, =1.7.1, =2719.0.0, =1.2.3, =0.1.4.dev3, =0.1.4.dev9 and more Source cves: CVE-2026-2720...

amapy-server (>=1.0.1, <=1.0.2), celery-director (>=0.5.0, <=0.8.0) +20 more potentially affected by CVE-2026-27205 via flask (2.1.1)

flask PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - amapy-server =1.0.1, =0.5.0, =2631.0.0, =1.9.4rc2, =0.2.0, =0.0.1.dev7, =0.0.1, =1.3.1, =0.1.3, =0.1.4 and more Source cves: CVE-2026-27205 Source...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), actinia-core (4.2.0) +682 more potentially affected by CVE-2026-27205 via flask (1.1.4)

flask PYPI version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.1.0rc3, =2022.9.19, =1.0.2, =0.1.1, =0.1.6, =1.0.7, =0.5.1, =0.2.0, =0.1.0, =1.0.0, =1.1.0 and more Sour...

flasksimpleauth (3.1.1), kordesii (2.4.0) +2 more potentially affected by CVE-2026-27205 via flask (2.0.0rc2)

flask PYPI version 2.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - flasksimpleauth 3.1.1 - kordesii 2.4.0 - mlf-core =1.0.0, =1.11.2 - mwcp 3.4.0 Source cves: CVE-2026-27205 Source advisory: OSV:PYSEC-2026-2151...

archivy (>=1.7.1, <=1.7.4), arcor2 (0.16.0) +23 more potentially affected by CVE-2026-27205 via flask (2.0.0)

flask PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - archivy =1.7.1, =0.1.3, =0.0.1, =0.0.27, =1.1.0, =1.2.0 and more Source cves: CVE-2026-27205 Source advisory: OSV:PYSEC-2026-2151...

aeros (>=2.0.0a1, <=2.0.0b4), alfworld (>=0.3.0rc1, <=0.3.0) +163 more potentially affected by CVE-2026-27205 via flask (2.0.3)

flask PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - aeros =2.0.0a1, =0.3.0rc1, =0.47.0, =0.10.0, =0.2.0, =0.19.1, =3.1.3, =1.61.0, =0.0.10, =3.0.0, =3.3.0 - burp-ui 1.0.0 - calculate-future-date 0.1.0 a...

adminui (1.5.2), adminui2 (>=1.5.2, <=1.5.3) +15 more potentially affected by CVE-2026-27205 via flask (2.1.0)

flask PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - adminui 1.5.2 - adminui2 =1.5.2, =1.0.0, =0.0.35, =0.13.0, =0.1.6, =0.12.0, =10.10.10, =1.0.0, =1.6.0 and more Source cves: CVE-2026-27205 Source...

aaz-dev (>=1.0.2, <=2.10.1), abilian-sbe (1.0.5) +172 more potentially affected by CVE-2026-27205 via flask (2.1.3)

flask PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - aaz-dev =1.0.2, =0.0.1b2, =5.0.1, =0.3.2, =1.5.0, =2.1.1.3, =0.0.7, =1.0.5, =0.2.40, =0.7.2, =0.7.6 and more Source cves: CVE-2026-27205 Source...

agentuniverse (>=0.0.6.dev1, <=0.0.7), docailite (>=0.4.0, <=0.6.0) +8 more potentially affected by CVE-2026-27205 via flask (2.2.0)

flask PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - agentuniverse =0.0.6.dev1, =0.4.0, =1.0.2, =0.0.3, =0.1.0, =4.6.1, =0.2.0, =2.0.0, =2.0.2 Source cves: CVE-2026-27205 Source advisory:...

edisgo (0.2.0), featureform (>=0.10.2, <=1.10.5) +4 more potentially affected by CVE-2026-27205 via flask (2.2.1)

flask PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - edisgo 0.2.0 - featureform =0.10.2, =0.10.1, =0.0.4, =0.8.3, =0.8.10 Source cves: CVE-2026-27205 Source advisory: OSV:PYSEC-2026-2151...

abstra (>=1.8.26, <=2.5.1), aihqrating (>=0.0.3, <=0.0.7) +148 more potentially affected by CVE-2026-27205 via flask (2.2.2)

flask PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - abstra =1.8.26, =0.0.3, =2022.8.1, =0.1.0, =1.0.0, =2801.0.0, =7.0.1, =0.0.2, =1.0.0, =1.1.0 and more Source cves: CVE-2026-27205 Source advisory:...

assemblyline-ui (>=4.4.0.14, <=4.4.1.dev132), authentication-factory (0.0.1) +55 more potentially affected by CVE-2026-27205 via flask (2.2.3)

flask PYPI version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - assemblyline-ui =4.4.0.14, =0.1.0, =1.0.1, =1.1.0, =2.10.0, =1.0.9, =0.2.0, =4.3.0, =1.0.0b2, =1.0.0b16 - flask-ms-oauth2 1.0.0 and more Source cves:...

flexget (3.6.5), oarepo (11.0.28) +1 more potentially affected by CVE-2026-27205 via flask (2.2.4)

flask PYPI version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - flexget 3.6.5 - oarepo 11.0.28 - rapid-qc-ms =1.0.0, =1.1.0 Source cves: CVE-2026-27205 Source advisory: OSV:PYSEC-2026-2151...

a-api-server (1.3.0), abi-ds-utils (1.0.1) +403 more potentially affected by CVE-2026-27205 via flask (2.2.5)

flask PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - a-api-server 1.3.0 - abi-ds-utils 1.0.1 - acceldata-o2a 1.0.0 - acryl-datahub-airflow-plugin =0.10.5.2rc3, =0.12.0, =0.2.1, =1.0.77, =0.8.2, =0.0.1,...

notlar (>=0.2.0, <=0.10.0) potentially affected by CVE-2026-27205 via flask (2.3.0)

flask PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - notlar =0.2.0, =0.10.0 Source cves: CVE-2026-27205 Source advisory: OSV:PYSEC-2026-2151...

anitya (1.8.0), enosimulator (>=0.1.0, <=0.3.4) +3 more potentially affected by CVE-2026-27205 via flask (2.3.1)

flask PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - anitya 1.8.0 - enosimulator =0.1.0, =0.0.26, =0.0.1, =5.2.0.dev799, =5.2.1 Source cves: CVE-2026-27205 Source advisory: OSV:PYSEC-2026-2151...

a2 (>=0.1.0, <=0.3.17), a62-emotion (>=0.10.0, <=0.11.4) +941 more potentially affected by CVE-2026-27205 via flask (2.3.3)

flask PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - a2 =0.1.0, =0.10.0, =0.9.5.1rc1, =1.4.0.3.post4, =1.4.0.3.post3, =0.0.1, =0.1.30, =0.0.8.dev1, =0.0.3, =0.4.0, =0.1.0a1, =0.1.1, =0.6.0 and more Sourc...