Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/flask@1.0.2-1?distro=trixie
purl pkg:deb/debian/flask@1.0.2-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-bmjp-tau8-bugq The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656. CVE-2019-1010083
GHSA-5wv5-4vpf-pj6m
PYSEC-2019-179
VCID-y5ke-uj7u-rydk The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. NOTE: this may overlap CVE-2019-1010083. CVE-2018-1000656
GHSA-562c-5r94-xh97
PYSEC-2018-66

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-29T12:40:15.344558+00:00 Debian Importer Fixing VCID-y5ke-uj7u-rydk https://security-tracker.debian.org/tracker/data/json 38.5.0
2026-04-16T13:03:23.935463+00:00 Debian Importer Fixing VCID-bmjp-tau8-bugq https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:40:13.334935+00:00 Debian Importer Fixing VCID-y5ke-uj7u-rydk https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:58:33.956801+00:00 Debian Importer Fixing VCID-bmjp-tau8-bugq https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:49:41.135367+00:00 Debian Importer Fixing VCID-y5ke-uj7u-rydk https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:23:58.898750+00:00 Debian Importer Fixing VCID-bmjp-tau8-bugq https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:23:58.839842+00:00 Debian Importer Fixing VCID-y5ke-uj7u-rydk https://security-tracker.debian.org/tracker/data/json 38.1.0