vuln-repo (>=0.0.2, <=0.0.4) potentially affected by CVE-2026-27205 via flask (0.6.1)

flask PYPI version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - vuln-repo =0.0.2, =0.0.4 Source cves: CVE-2026-27205 Source advisory: OSV:PYSEC-2026-2151...

gym-http-server (0.0.1), komand (3.2.0) +1 more potentially affected by CVE-2026-27205 via flask (0.12.3)

flask PYPI version 0.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - gym-http-server 0.0.1 - komand 3.2.0 - shrunk 0.6.1 Source cves: CVE-2026-27205 Source advisory: OSV:PYSEC-2026-2151...

burp-ui (>=0.6.0, <=0.6.6), dagit (>=0.3.2, <=0.4.3.post4) +4 more potentially affected by CVE-2026-27205 via flask (0.12.4)

flask PYPI version 0.12.4 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - burp-ui =0.6.0, =0.3.2, =0.1.1, =0.1.1, =0.10.0, =2.0.2, =2.0.3 Source cves: CVE-2026-27205 Source advisory: OSV:PYSEC-2026-2151...

bbc1 (>=1.5.0, <=1.5.1), dataviewer (>=0.4.5, <=0.4.8) +1 more potentially affected by CVE-2026-27205 via flask (1.0.1)

flask PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - bbc1 =1.5.0, =0.4.5, =0.0.4, =0.0.7 Source cves: CVE-2026-27205 Source advisory: OSV:PYSEC-2026-2151...

agogosml (>=0.1.1, <=0.1.2), allennlp (>=0.8.0, <=0.8.2) +152 more potentially affected by CVE-2026-27205 via flask (1.0.2)

flask PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - agogosml =0.1.1, =0.8.0, =0.1.0, =0.14.0, =1.0.1, =1.0.17, =3.9.0, =2.4.1, =0.1.0, =0.6.7.post3, =1.0.1, =0.1.1, =0.0.1, =0.2.2.dev92, =1.0.1 and more...

agogosml (0.1.3), aiolambda (>=0.2.0, <=0.3.0) +38 more potentially affected by CVE-2026-27205 via flask (1.0.4)

flask PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - agogosml 0.1.3 - aiolambda =0.2.0, =1.10.3b1, =0.17.0, =0.0.4, =0.0.1, =0.0.2, =0.3.0, =1.1.1.2, =1.0.0, =0.5.4rc0, =0.5.4rc0, =1.2.0.2, =7.28.1, =8.0...

cook-file-server (>=0.0.1, <=0.1.0), elementary-data (>=0.1.1, <=0.2.7) +6 more potentially affected by CVE-2026-27205 via flask (1.1.0)

flask PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - cook-file-server =0.0.1, =0.1.1, =0.0.4, =0.0.4, =0.1.0, =0.0.4, =0.0.6, =0.1.1 Source cves: CVE-2026-27205 Source advisory: OSV:PYSEC-2026-2151...

add-dependencies (2.3.0) potentially affected by CVE-2026-27205 via flask (0.5.0)

flask PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - add-dependencies 2.3.0 Source cves: CVE-2026-27205 Source advisory: OSV:PYSEC-2026-2151...

autologin (>=0.1.1, <=0.1.3), cabu (0.0.2) +20 more potentially affected by CVE-2026-27205 via flask (0.10.1)

flask PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - autologin =0.1.1, =1.2.1, =2.2.11, =0.5.0, =0.1.0, =0.0.1, =0.3.1, =0.6.2, =0.0.1, =0.0.1, =0.1.12 and more Source cves: CVE-2026-27205 Source...

gief (0.0.3), larigira (>=0.2.0, <=1.3.3) +1 more potentially affected by CVE-2026-27205 via flask (0.11.0)

flask PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - gief 0.0.3 - larigira =0.2.0, =0.0.11, =1.0.5 Source cves: CVE-2026-27205 Source advisory: OSV:PYSEC-2026-2151...

abbr (0.0.0), blendedux (0.0.2) +32 more potentially affected by CVE-2026-27205 via flask (0.11.1)

flask PYPI version 0.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - abbr 0.0.0 - blendedux 0.0.2 - burp-ui =0.4.1, =4.3.2, =1.4.3, =1.0.0.dev5, =1.0.0.dev0, =0.23.22, =0.0.1, =2.5.3, =0.18.1, =0.1.1, =1.0.0a1, =1.1.0...

alignak-backend (>=1.4.15, <=1.4.16), alignak-webui (>=0.11.1, <=0.12.2) +11 more potentially affected by CVE-2026-27205 via flask (0.12.0)

flask PYPI version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - alignak-backend =1.4.15, =0.11.1, =0.1.0, =0.5.0, =1.0.8, =4.5.0, =0.2.0.dev0, =0.2.0, =23.1.0, =1.0.2, =1.0.5 - showcase 0.3.4 Source cves:...

allennlp (>=0.4.0, <=0.4.1), bentodev (>=0.1.17, <=2018.11.2) +7 more potentially affected by CVE-2026-27205 via flask (0.12.1)

flask PYPI version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - allennlp =0.4.0, =0.1.17, =0.1.0, =0.9.2, =0.1.48, =0.1.0, =0.2.5 - spiderkeeper-zam 1.2.2 Source cves: CVE-2026-27205 Source advisory:...

aequitas (>=0.26.0, <=0.42.0), appkernel (>=0.1.0, <=1.0.0) +37 more potentially affected by CVE-2026-27205 via flask (0.12.2)

flask PYPI version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - aequitas =0.26.0, =0.1.0, =0.7.1, =0.1.0, =0.0.1, =0.0.5.1, =0.0.2, =0.1.1, =0.12.0, =2.10.60, =0.1.0, =0.2.0, =1.1.0, =1.2.0 and more Source cves:...

almanach (>=4.0.0, <=4.1.0), alo7-airflow (>=1.10.0, <=1.10.0.7) +37 more potentially affected by CVE-2026-27205 via flask (0.12.5)

flask PYPI version 0.12.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - almanach =4.0.0, =1.10.0, =0.14.0, =1.0.18, =0.1.0, =0.0.1a0, =0.0.3a0, =3.0.0, =0.1.0, =0.2.1 and more Source cves: CVE-2026-27205 Source advisory:...

dyn-libs (>=0.2.1, <=0.2.2), quick-mock (>=0.0.2, <=0.0.3) +2 more potentially affected by CVE-2026-27205 via flask (1.0.0)

flask PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - dyn-libs =0.2.1, =0.0.2, =2.2.2.1, =2.3.1.0 - sevenpack 2.7.1 Source cves: CVE-2026-27205 Source advisory: OSV:PYSEC-2026-2151...

ajas (>=0.2.0, <=0.2.3), azureml-automl-dnn-nlp (>=1.37.0, <=1.43.0.post1) +37 more potentially affected by CVE-2026-27205 via flask (1.0.3)

flask PYPI version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - ajas =0.2.0, =1.37.0, =1.37.0, =1.0.69, =1.0.48, =0.0.112, =0.0.1, =0.0.20, =0.0.40, =0.0.16, =0.0.1, =0.0.1, =0.0.1, =0.0.2, =0.1.5, =0.6.1 and more...

activedirectoryenum (>=0.4.0, <=0.4.9), agreement-api (0.0.1) +164 more potentially affected by CVE-2026-27205 via flask (1.1.1)

flask PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - activedirectoryenum =0.4.0, =0.0.3, =1.3.0, =0.0.1.post1, =0.0.0, =0.11.0, =0.14.0, =0.1.0, =0.2.2 - arcor2-execution 0.11.0 - arcor2-execution-data...

actionpi (>=1.1.4, <=1.2.0.dev22), activedirectoryenum (0.5.0) +287 more potentially affected by CVE-2026-27205 via flask (1.1.2)

flask PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - actionpi =1.1.4, =2.5.0, =2.5.0, =0.0.6, =0.6.2, =0.1.1, =0.7.0, =2021.2.5rc1, =0.1.0.dev1, =1.4.0, =5.3.33 and more Source cves: CVE-2026-27205 Sourc...

CVE-2026-27205

Flask is a web server gateway interface WSGI web application framework. In versions 3.1.2 and below, when the session object is accessed, Flask should set the Vary: Cookie header., resulting in a Use of Cache Containing Sensitive Information vulnerability. The logic instructs caches not to cache...