flask-appbuilder has 12 CVEs on record between 2021 and 2025. The median CVSS is 5.7 (medium), with 1 rated critical. None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.7
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Products
- flask-appbuilder 12
Worst active — by depth score
CVE-2024-25128Critical· 9.1Flask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID 50CVE-2021-41265High· 8.1Improper Authentication in Flask-AppBuilder45CVE-2023-29005High· 7.5Flask-AppBuilder Has No Rate Limiting on Login AUTH DB41CVE-2021-32805High· 7.2Flask-AppBuilder Open Redirect vulnerability40CVE-2025-58065Medium· 6.5Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods36
flask-appbuilder vulnerabilities
CVEs affecting flask-appbuilder, newest first. Open any entry for full detail, references, and exploit status.
12 CVEsRSS
CVE-2025-58065Medium· 6.5Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods
Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods
CVE-2025-32962Medium· 4.3Flask-AppBuilder open redirect vulnerability using HTTP host injection
Flask-AppBuilder open redirect vulnerability using HTTP host injection
CVE-2025-24023Low· 3.7Flask-AppBuilder Observable Response Discrepancy
Flask-AppBuilder Observable Response Discrepancy
CVE-2024-45314Low· 3.6Flask-AppBuilder's login form allows browser to cache sensitive fields
Flask-AppBuilder's login form allows browser to cache sensitive fields
CVE-2024-25128Critical· 9.1Flask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID
Flask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID
CVE-2024-27083Medium· 4.3Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS)
Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS)
CVE-2023-29005High· 7.5Flask-AppBuilder Has No Rate Limiting on Login AUTH DB
Flask-AppBuilder Has No Rate Limiting on Login AUTH DB
CVE-2022-24776Medium· 6.1Open Redirect in Flask-AppBuilder
Open Redirect in Flask-AppBuilder
CVE-2022-21659Medium· 5.3Observable Response Discrepancy in Flask-AppBuilder
Observable Response Discrepancy in Flask-AppBuilder
CVE-2021-41265High· 8.1Improper Authentication in Flask-AppBuilder
Improper Authentication in Flask-AppBuilder
CVE-2021-32805High· 7.2Flask-AppBuilder Open Redirect vulnerability
Flask-AppBuilder Open Redirect vulnerability
CVE-2021-29621Medium· 5.3Observable Response Discrepancy in Flask-AppBuilder
Observable Response Discrepancy in Flask-AppBuilder