Flask — CWE-524

All FrameworksFlaskCWE-524

1 CVEs categorized as CWE-524 in Flask.

CVE-2026-27205LOW2026
Flask is a web server gateway interface (WSGI) web application framework. In versions 3.1.2 and below, when the session object is accessed, Flask should set the Vary: Cookie header., resulting in a Use of Cache Containing Sensitive Information vulnerability. The logic instructs caches not to cache t…