pallets Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by pallets

JSON RSS CSV 🔔 Create Alert Trigger

30 April 2026

Command Injection Vulnerability in Pallets Click Affected by Arbitrary OS Commands
CVE-2026-7246
Pallets ClickClick7.2HIGH

6 May 2024

Werkzeug Debugger Vulnerability Allows Attacker to Execute Code on Developer's Machine
CVE-2024-34069
PalletsWerkzeugEPSS 43%7.5HIGH

25 October 2023

Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning
CVE-2023-46136
PalletsWerkzeug👾🟡8HIGH

2 May 2023

Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header
CVE-2023-30861
PalletsFlask👾🟡7.5HIGH

14 February 2023

Werkzeug may allow high resource usage when parsing multipart form data with many fields
CVE-2023-25577
PalletsWerkzeug7.5HIGH

17 July 2019

Denial of Service in Flask by Pallets Project
CVE-2019-1010083
The Pallets ProjectFlask7.5HIGH