archivy (>=1.7.1, <=1.7.4), arcor2 (0.16.0) +23 more potentially affected by CVE-2026-27205 via flask (2.0.0)

flask PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - archivy =1.7.1, =0.1.3, =0.0.1, =0.0.27, =1.1.0, =1.2.0 and more Source cves: CVE-2026-27205 Source advisory: OSV:GHSA-68RP-WP8R-4726...

autologin (>=0.1.1, <=0.1.3), cabu (0.0.2) +20 more potentially affected by CVE-2026-27205 via flask (0.10.1)

flask PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - autologin =0.1.1, =1.2.1, =2.2.11, =0.5.0, =0.1.0, =0.0.1, =0.3.1, =0.6.2, =0.0.1, =0.0.1, =0.1.12 and more Source cves: CVE-2026-27205 Source...

allennlp (>=0.4.0, <=0.4.1), bentodev (>=0.1.17, <=2018.11.2) +7 more potentially affected by CVE-2026-27205 via flask (0.12.1)

flask PYPI version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - allennlp =0.4.0, =0.1.17, =0.1.0, =0.9.2, =0.1.48, =0.1.0, =0.2.5 - spiderkeeper-zam 1.2.2 Source cves: CVE-2026-27205 Source advisory:...

Flask session does not add `Vary: Cookie` header when accessed in some ways

When the session object is accessed, Flask should set the Vary: Cookie header. This instructs caches not to cache the response, as it may contain information specific to a logged in user. This is handled in most cases, but some forms of access such as the Python in operator were overlooked. The...

flasksimpleauth (3.1.1), kordesii (2.4.0) +2 more potentially affected by CVE-2026-27205 via flask (2.0.0rc2)

flask PYPI version 2.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - flasksimpleauth 3.1.1 - kordesii 2.4.0 - mlf-core =1.0.0, =1.11.2 - mwcp 3.4.0 Source cves: CVE-2026-27205 Source advisory: OSV:GHSA-68RP-WP8R-4726...

agent-manager-sdk (>=0.1.1, <=0.1.2), aipack (>=0.0.1, <=0.0.5) +71 more potentially affected by CVE-2026-27205 via flask (2.0.1)

flask PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - agent-manager-sdk =0.1.1, =0.0.1, =0.16.0, =2.3.0, =0.17.0, =0.16.0, =0.11.0, =0.13.0, =0.14.0, =0.15.0 and more Source cves: CVE-2026-27205 Source...

arcor2 (>=0.22.0, <=0.23.1), arcor2-build (0.21.0) +81 more potentially affected by CVE-2026-27205 via flask (2.0.2)

flask PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - arcor2 =0.22.0, =0.3.0, =0.19.0, =0.14.0, =0.14.0, =0.7.0, =0.1.0, =0.1.2, =0.1.0, =0.1.2 and more Source cves: CVE-2026-27205 Source advisory:...

aeros (>=2.0.0a1, <=2.0.0b4), alfworld (>=0.3.0rc1, <=0.3.0) +163 more potentially affected by CVE-2026-27205 via flask (2.0.3)

flask PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - aeros =2.0.0a1, =0.3.0rc1, =0.47.0, =0.10.0, =0.2.0, =0.19.1, =3.1.3, =1.61.0, =0.0.10, =3.0.0, =3.3.0 - burp-ui 1.0.0 - calculate-future-date 0.1.0 a...

adminui (1.5.2), adminui2 (>=1.5.2, <=1.5.3) +15 more potentially affected by CVE-2026-27205 via flask (2.1.0)

flask PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - adminui 1.5.2 - adminui2 =1.5.2, =1.0.0, =0.0.35, =0.13.0, =0.1.6, =0.12.0, =10.10.10, =1.0.0, =1.6.0 and more Source cves: CVE-2026-27205 Source...

amapy-server (>=1.0.1, <=1.0.2), celery-director (>=0.5.0, <=0.8.0) +20 more potentially affected by CVE-2026-27205 via flask (2.1.1)

flask PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - amapy-server =1.0.1, =0.5.0, =2631.0.0, =1.9.4rc2, =0.2.0, =0.0.1.dev7, =0.0.1, =1.3.1, =0.1.3, =0.1.4 and more Source cves: CVE-2026-27205 Source...

adop (>=0.0.1a1, <=0.0.1a5), analogic-framework (>=4.0.2, <=4.1.1) +67 more potentially affected by CVE-2026-27205 via flask (2.1.2)

flask PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - adop =0.0.1a1, =4.0.2, =2.6.0, =1.0.5, =3.1.0, =1.0.0, =1.0.1, =1.7.1, =2719.0.0, =1.2.3, =0.1.4.dev3, =0.1.4.dev9 and more Source cves: CVE-2026-2720...

aaz-dev (>=1.0.2, <=2.10.1), abilian-sbe (1.0.5) +172 more potentially affected by CVE-2026-27205 via flask (2.1.3)

flask PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - aaz-dev =1.0.2, =0.0.1b2, =5.0.1, =0.3.2, =1.5.0, =2.1.1.3, =0.0.7, =1.0.5, =0.2.40, =0.7.2, =0.7.6 and more Source cves: CVE-2026-27205 Source...

agentuniverse (>=0.0.6.dev1, <=0.0.7), docailite (>=0.4.0, <=0.6.0) +8 more potentially affected by CVE-2026-27205 via flask (2.2.0)

flask PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - agentuniverse =0.0.6.dev1, =0.4.0, =1.0.2, =0.0.3, =0.1.0, =4.6.1, =0.2.0, =2.0.0, =2.0.2 Source cves: CVE-2026-27205 Source advisory:...

edisgo (0.2.0), featureform (>=0.10.2, <=1.10.5) +4 more potentially affected by CVE-2026-27205 via flask (2.2.1)

flask PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - edisgo 0.2.0 - featureform =0.10.2, =0.10.1, =0.0.4, =0.8.3, =0.8.10 Source cves: CVE-2026-27205 Source advisory: OSV:GHSA-68RP-WP8R-4726...

abstra (>=1.8.26, <=2.5.1), aihqrating (>=0.0.3, <=0.0.7) +148 more potentially affected by CVE-2026-27205 via flask (2.2.2)

flask PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - abstra =1.8.26, =0.0.3, =2022.8.1, =0.1.0, =1.0.0, =2801.0.0, =7.0.1, =0.0.2, =1.0.0, =1.1.0 and more Source cves: CVE-2026-27205 Source advisory:...

assemblyline-ui (>=4.4.0.14, <=4.4.1.dev132), authentication-factory (0.0.1) +55 more potentially affected by CVE-2026-27205 via flask (2.2.3)

flask PYPI version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - assemblyline-ui =4.4.0.14, =0.1.0, =1.0.1, =1.1.0, =2.10.0, =1.0.9, =0.2.0, =4.3.0, =1.0.0b2, =1.0.0b16 - flask-ms-oauth2 1.0.0 and more Source cves:...

flexget (3.6.5), oarepo (11.0.28) +1 more potentially affected by CVE-2026-27205 via flask (2.2.4)

flask PYPI version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - flexget 3.6.5 - oarepo 11.0.28 - rapid-qc-ms =1.0.0, =1.1.0 Source cves: CVE-2026-27205 Source advisory: OSV:GHSA-68RP-WP8R-4726...

a-api-server (1.3.0), abi-ds-utils (1.0.1) +403 more potentially affected by CVE-2026-27205 via flask (2.2.5)

flask PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - a-api-server 1.3.0 - abi-ds-utils 1.0.1 - acceldata-o2a 1.0.0 - acryl-datahub-airflow-plugin =0.10.5.2rc3, =0.12.0, =0.2.1, =1.0.77, =0.8.2, =0.0.1,...

notlar (>=0.2.0, <=0.10.0) potentially affected by CVE-2026-27205 via flask (2.3.0)

flask PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - notlar =0.2.0, =0.10.0 Source cves: CVE-2026-27205 Source advisory: OSV:GHSA-68RP-WP8R-4726...

anitya (1.8.0), enosimulator (>=0.1.0, <=0.3.4) +3 more potentially affected by CVE-2026-27205 via flask (2.3.1)

flask PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - anitya 1.8.0 - enosimulator =0.1.0, =0.0.26, =0.0.1, =5.2.0.dev799, =5.2.1 Source cves: CVE-2026-27205 Source advisory: OSV:GHSA-68RP-WP8R-4726...