2 matches found
CVE-2021-21241
The CVE-2021-21241 issue affects the Python package Flask-Security-Too (independently maintained fork of Flask-Security). In versions 3.3.0 through 3.4.4 (and including 3.4.5 before patch) the /login and /change endpoints could return the authenticated user’s token in response to a GET request. S...
CVE-2023-49438
Vulnerability summary (CVE-2023-49438) : The Python package Flask-Security-Too