flask-appbuilder vulnerabilities
CVEs whose affected-version data names the flask-appbuilder package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
12 CVEsRSS
CVE-2025-58065Medium· 6.5Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods
Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods
CVE-2025-32962Medium· 4.3Flask-AppBuilder open redirect vulnerability using HTTP host injection
Flask-AppBuilder open redirect vulnerability using HTTP host injection
CVE-2025-24023Low· 3.7Flask-AppBuilder Observable Response Discrepancy
Flask-AppBuilder Observable Response Discrepancy
CVE-2024-45314Low· 3.6Flask-AppBuilder's login form allows browser to cache sensitive fields
Flask-AppBuilder's login form allows browser to cache sensitive fields
CVE-2024-25128Critical· 9.1Flask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID
Flask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID
CVE-2024-27083Medium· 4.3Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS)
Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS)
CVE-2023-29005High· 7.5Flask-AppBuilder Has No Rate Limiting on Login AUTH DB
Flask-AppBuilder Has No Rate Limiting on Login AUTH DB
CVE-2022-24776Medium· 6.1Open Redirect in Flask-AppBuilder
Open Redirect in Flask-AppBuilder
CVE-2022-21659Medium· 5.3Observable Response Discrepancy in Flask-AppBuilder
Observable Response Discrepancy in Flask-AppBuilder
CVE-2021-41265High· 8.1Improper Authentication in Flask-AppBuilder
Improper Authentication in Flask-AppBuilder
CVE-2021-32805High· 7.2Flask-AppBuilder Open Redirect vulnerability
Flask-AppBuilder Open Redirect vulnerability
CVE-2021-29621Medium· 5.3Observable Response Discrepancy in Flask-AppBuilder
Observable Response Discrepancy in Flask-AppBuilder