{"id":2735393,"name":"flask","ecosystem":"pypi","description":"A simple framework for building complex web applications.","homepage":null,"licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/pallets/flask","keywords_array":[],"namespace":null,"versions_count":64,"first_release_published_at":"2010-04-16T14:29:37.000Z","latest_release_published_at":"2026-02-19T05:00:56.000Z","latest_release_number":"3.1.3","latest_published_release_number":"3.1.3","last_synced_at":"2026-11-12T01:36:32.076Z","created_at":"2022-04-10T11:00:48.569Z","updated_at":"2026-11-12T12:29:14.645Z","registry_url":"https://pypi.org/project/flask/","install_command":"pip install flask --index-url https://pypi.org/simple","documentation_url":"https://flask.palletsprojects.com/","metadata":{"funding":"https://palletsprojects.com/donate","documentation":"https://flask.palletsprojects.com/","classifiers":["Development Status :: 5 - Production/Stable","Environment :: Web Environment","Framework :: Flask","Intended Audience :: Developers","Operating System :: OS Independent","Programming Language :: Python","Topic :: Internet :: WWW/HTTP :: Dynamic Content","Topic :: Internet :: WWW/HTTP :: WSGI","Topic :: Internet :: WWW/HTTP :: WSGI :: Application","Topic :: Software Development :: Libraries :: Application Frameworks","Typing :: Typed"],"normalized_name":"flask","project_status":null},"repo_metadata":{"id":861255,"uuid":"596892","full_name":"pallets/flask","owner":"pallets","description":"The Python micro framework for building web applications.","archived":false,"fork":false,"pushed_at":"2026-10-30T15:05:22.000Z","size":12227,"stargazers_count":74944,"open_issues_count":4,"forks_count":17257,"subscribers_count":2131,"default_branch":"main","last_synced_at":"2026-11-04T08:09:11.415Z","etag":null,"topics":["flask","jinja","pallets","python","web-framework","werkzeug","wsgi"],"latest_commit_sha":null,"homepage":"https://flask.palletsprojects.com","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/pallets.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.rst","contributing":"docs/contributing.rst","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"accessibility":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"pallets","custom":"https://palletsprojects.com/donate","tidelift":"pypi/Flask","thanks_dev":"u/gh/pallets"}},"created_at":"2010-04-06T11:11:59.000Z","updated_at":"2026-11-04T06:20:59.000Z","dependencies_parsed_at":"2026-10-11T20:35:39.772Z","dependency_job_id":null,"html_url":"https://github.com/pallets/flask","commit_stats":{"total_commits":3724,"total_committers":854,"mean_commits":4.360655737704918,"dds":0.7381847475832438,"last_synced_commit":"6b054f8f3876ff4c31580b014d344c4cf491059d"},"previous_names":["mitsuhiko/flask"],"tags_count":69,"template":false,"template_full_name":null,"purl":"pkg:github/pallets/flask","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/pallets","download_url":"https://codeload.github.com/pallets/flask/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/sbom","scorecard":{"id":718431,"data":{"date":"2025-08-11","repo":{"name":"github.com/pallets/flask","commit":"85c5d93cbd049c4bd0679c36fd1ddcae8c37b642"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.1,"checks":[{"name":"Maintained","score":10,"reason":"15 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: jobLevel 'contents' permission set to 'write': .github/workflows/publish.yaml:26","Warn: no topLevel permission defined: .github/workflows/pre-commit.yaml:1","Warn: no topLevel permission defined: .github/workflows/publish.yaml:1","Warn: no topLevel permission defined: .github/workflows/tests.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":8,"reason":"dependency not pinned by hash detected -- score normalized to 8","details":["Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/tests.yaml:34","Warn: pipCommand not pinned by hash: .devcontainer/on-create-command.sh:5","Warn: pipCommand not pinned by hash: .devcontainer/on-create-command.sh:6","Info:  13 out of  13 GitHub-owned GitHubAction dependencies pinned","Info:   7 out of   7 third-party GitHubAction dependencies pinned","Info:   0 out of   2 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/publish.yaml:33"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":10,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/pallets/flask/releases/tag/3.1.1","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/pallets/flask/releases/tag/3.1.0","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/pallets/flask/releases/tag/3.0.3","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/pallets/flask/releases/tag/3.0.2","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/pallets/flask/releases/tag/3.0.1"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: could not determine whether codeowners review is allowed","Warn: no status checks found to merge onto branch 'main'","Warn: PRs are not required to make changes on branch 'main'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":9,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/pallets/.github/SECURITY.md:1","Info: Found linked content: github.com/pallets/.github/SECURITY.md:1","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: github.com/pallets/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":1,"reason":"9 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-h5c8-rqwp-cp95","Warn: Project is vulnerable to: GHSA-h75v-3vvj-5mfj","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: GHSA-2g68-c3qc-8985","Warn: Project is vulnerable to: GHSA-f9vj-2wh5-fj8j","Warn: Project is vulnerable to: PYSEC-2023-221 / GHSA-hrfv-mqp8-q5rw","Warn: Project is vulnerable to: GHSA-q34m-jh98-gwm2"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 13 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T10:27:45.989Z","repository_id":861255,"created_at":"2025-08-22T10:27:45.989Z","updated_at":"2025-08-22T10:27:45.989Z"},"funding_links":["https://github.com/sponsors/pallets","https://palletsprojects.com/donate","https://tidelift.com/funding/github/pypi/Flask","https://thanks.dev/u/gh/pallets"],"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":349647599,"owners_count":38573916,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-11-03T11:36:44.738Z","status":"online","status_checked_at":"2026-11-04T02:00:07.505Z","response_time":52,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"pallets","name":"Pallets","uuid":"16748505","kind":"organization","description":"","email":"contact@palletsprojects.com","website":"https://palletsprojects.com","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16748505?v=4","repositories_count":16,"last_synced_at":"2026-11-09T00:08:35.682Z","metadata":{"has_sponsors_listing":true,"funding":{"github":"pallets","custom":"https://palletsprojects.com/donate","tidelift":"pypi/Flask","thanks_dev":"u/gh/pallets"}},"html_url":"https://github.com/pallets","funding_links":["https://github.com/sponsors/pallets","https://palletsprojects.com/donate","https://tidelift.com/funding/github/pypi/Flask","https://thanks.dev/u/gh/pallets"],"total_stars":120762,"followers":2686,"following":0,"created_at":"2022-11-02T16:23:17.051Z","updated_at":"2026-11-09T00:08:35.698Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/pallets","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/pallets/repositories"},"tags":[{"name":"3.1.3","sha":"22d924701a6ae2e4cd01e9a15bbaf3946094af65","kind":"tag","published_at":"2026-02-19T04:56:48.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/3.1.3","html_url":"https://github.com/pallets/flask/releases/tag/3.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@3.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/3.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/3.1.3/manifests","release_url":null},{"name":"3.1.2","sha":"2c1b30d0503cfb064f1cb252e6614a06915a362a","kind":"tag","published_at":"2025-08-19T20:57:58.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/3.1.2","html_url":"https://github.com/pallets/flask/releases/tag/3.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@3.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/3.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/3.1.2/manifests","release_url":null},{"name":"3.1.1","sha":"7fff56f5172c48b6f3aedf17ee14ef5c2533dfd1","kind":"tag","published_at":"2025-05-13T14:53:02.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/3.1.1","html_url":"https://github.com/pallets/flask/releases/tag/3.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@3.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/3.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/3.1.1/manifests","release_url":null},{"name":"3.1.0","sha":"ab8149664182b662453a563161aa89013c806dc9","kind":"tag","published_at":"2024-11-13T18:20:14.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/3.1.0","html_url":"https://github.com/pallets/flask/releases/tag/3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/3.1.0/manifests","release_url":null},{"name":"2.3.x","sha":"a6007373b5c521297e2ec24f820b9c7c32659af8","kind":"tag","published_at":"2024-10-24T20:19:15.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.3.x","html_url":"https://github.com/pallets/flask/releases/tag/2.3.x","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.3.x","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.3.x","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.3.x/manifests","release_url":null},{"name":"2.2.x","sha":"bda08b11c692a5c94124b11749c1af6fa5c0e003","kind":"tag","published_at":"2024-10-24T20:19:02.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.2.x","html_url":"https://github.com/pallets/flask/releases/tag/2.2.x","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.2.x","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.2.x","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.2.x/manifests","release_url":null},{"name":"2.1.x","sha":"ac1bb97679f2b778bd89580fac2f461ff77c716a","kind":"tag","published_at":"2024-10-24T20:18:49.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.1.x","html_url":"https://github.com/pallets/flask/releases/tag/2.1.x","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.1.x","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.1.x","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.1.x/manifests","release_url":null},{"name":"2.0.x","sha":"0305d31cb8c62b26c1e073995114963c88ca962e","kind":"tag","published_at":"2024-10-24T20:18:41.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.0.x","html_url":"https://github.com/pallets/flask/releases/tag/2.0.x","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.0.x","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.0.x","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.0.x/manifests","release_url":null},{"name":"1.1.x","sha":"1ca199f9b38b70a4e97cb47a4252ffd7fccc008c","kind":"tag","published_at":"2024-10-24T20:18:19.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/1.1.x","html_url":"https://github.com/pallets/flask/releases/tag/1.1.x","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@1.1.x","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.1.x","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.1.x/manifests","release_url":null},{"name":"1.0.x","sha":"d92b64aa275841b0c9aea3903aba72fbc4275d91","kind":"tag","published_at":"2024-10-24T20:18:11.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/1.0.x","html_url":"https://github.com/pallets/flask/releases/tag/1.0.x","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@1.0.x","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.0.x","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.0.x/manifests","release_url":null},{"name":"0.12.x","sha":"79c71f24e4cb064852e2cbbfef78a0a051eb7ced","kind":"tag","published_at":"2024-10-24T20:17:21.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.12.x","html_url":"https://github.com/pallets/flask/releases/tag/0.12.x","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.12.x","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.12.x","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.12.x/manifests","release_url":null},{"name":"3.0.3","sha":"c12a5d874c5a014495eb2db8a73f40037bc813ac","kind":"tag","published_at":"2024-04-07T19:19:46.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/3.0.3","html_url":"https://github.com/pallets/flask/releases/tag/3.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@3.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/3.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/3.0.3/manifests","release_url":null},{"name":"3.0.2","sha":"d2030595dcdc8ca5701504f00255360fb12a3a2b","kind":"tag","published_at":"2024-02-03T21:03:16.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/3.0.2","html_url":"https://github.com/pallets/flask/releases/tag/3.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@3.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/3.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/3.0.2/manifests","release_url":null},{"name":"3.0.1","sha":"f622b1cadea2bed4ea4cc476695e9c181ec5da11","kind":"tag","published_at":"2024-01-18T19:57:54.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/3.0.1","html_url":"https://github.com/pallets/flask/releases/tag/3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/3.0.1/manifests","release_url":null},{"name":"3.0.0","sha":"735a4701d6d5e848241e7d7535db898efb62d400","kind":"commit","published_at":"2023-09-30T14:26:06.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/3.0.0","html_url":"https://github.com/pallets/flask/releases/tag/3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/3.0.0/manifests","release_url":null},{"name":"2.3.3","sha":"3205b53c7cf69d17fee49cac6b84978175b7dd73","kind":"tag","published_at":"2023-08-21T17:57:53.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.3.3","html_url":"https://github.com/pallets/flask/releases/tag/2.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.3.3/manifests","release_url":null},{"name":"2.2.5","sha":"47af817c8fe01045c641b97f8fb784c7ad864eee","kind":"tag","published_at":"2023-05-02T14:36:00.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.2.5","html_url":"https://github.com/pallets/flask/releases/tag/2.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.2.5/manifests","release_url":null},{"name":"2.3.2","sha":"f3b8f570545200c87465d18386f3fc9f2258307a","kind":"tag","published_at":"2023-05-01T15:35:38.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.3.2","html_url":"https://github.com/pallets/flask/releases/tag/2.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.3.2/manifests","release_url":null},{"name":"2.3.1","sha":"721abdc3810057269503a72d2db80fb826f3c85c","kind":"tag","published_at":"2023-04-25T20:14:58.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.3.1","html_url":"https://github.com/pallets/flask/releases/tag/2.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.3.1/manifests","release_url":null},{"name":"2.3.0","sha":"8728c3e4cd4e929a4327d917acd4b96c75f963d0","kind":"tag","published_at":"2023-04-25T18:36:50.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.3.0","html_url":"https://github.com/pallets/flask/releases/tag/2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.3.0/manifests","release_url":null},{"name":"2.2.4","sha":"74e03298200e33951ca350a35aa3a8c0b4ff8177","kind":"tag","published_at":"2023-04-25T17:44:49.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.2.4","html_url":"https://github.com/pallets/flask/releases/tag/2.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.2.4/manifests","release_url":null},{"name":"2.2.3","sha":"41d4f62909bb426c84e9d057151f7d734695320a","kind":"tag","published_at":"2023-02-15T22:39:24.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.2.3","html_url":"https://github.com/pallets/flask/releases/tag/2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.2.3/manifests","release_url":null},{"name":"2.2.2","sha":"a1c478bc93d3dc018a6e7a1ba3cf5409553c9df3","kind":"tag","published_at":"2022-08-08T23:25:33.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.2.2","html_url":"https://github.com/pallets/flask/releases/tag/2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.2.2/manifests","release_url":null},{"name":"2.2.1","sha":"85f79e1a2360c3589b228410c39e208b8514b5b9","kind":"tag","published_at":"2022-08-03T23:51:45.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.2.1","html_url":"https://github.com/pallets/flask/releases/tag/2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.2.1/manifests","release_url":null},{"name":"2.2.0","sha":"b17bb9ed563ab2857c0db9a07ec4e6407404c7be","kind":"tag","published_at":"2022-08-02T00:14:22.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.2.0","html_url":"https://github.com/pallets/flask/releases/tag/2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.2.0/manifests","release_url":null},{"name":"2.1.3","sha":"187d7179f605d28c3d24e9f4d65d3295fb099afe","kind":"tag","published_at":"2022-07-13T20:54:55.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.1.3","html_url":"https://github.com/pallets/flask/releases/tag/2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.1.3/manifests","release_url":null},{"name":"2.1.2","sha":"50374e3cfe815acd24fd390c861561a0dd17bfbb","kind":"tag","published_at":"2022-04-28T17:48:24.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.1.2","html_url":"https://github.com/pallets/flask/releases/tag/2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.1.2/manifests","release_url":null},{"name":"2.1.1","sha":"188bd17ff1f3e1d9c9ddd015c8765280e95ffb83","kind":"tag","published_at":"2022-03-30T21:38:55.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.1.1","html_url":"https://github.com/pallets/flask/releases/tag/2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.1.1/manifests","release_url":null},{"name":"2.1.0","sha":"65b0eef303dfec6b7baa66ff34253e0285e1c3bf","kind":"tag","published_at":"2022-03-28T19:12:29.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.1.0","html_url":"https://github.com/pallets/flask/releases/tag/2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.1.0/manifests","release_url":null},{"name":"2.0.3","sha":"ef557b3ff2602b9956a2f3ac02c6e134c529fccc","kind":"tag","published_at":"2022-02-14T19:47:04.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.0.3","html_url":"https://github.com/pallets/flask/releases/tag/2.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.0.3/manifests","release_url":null},{"name":"2.0.2","sha":"6f7762538bffe3ce9d03508ecab230bfff3e3dcd","kind":"tag","published_at":"2021-10-04T14:35:54.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.0.2","html_url":"https://github.com/pallets/flask/releases/tag/2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.0.2/manifests","release_url":null},{"name":"2.0.1","sha":"bc90801c2ada42d3cf112a3b5701bfdbb8b6211c","kind":"tag","published_at":"2021-05-21T15:52:43.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.0.1","html_url":"https://github.com/pallets/flask/releases/tag/2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.0.1/manifests","release_url":null},{"name":"1.1.4","sha":"1ca199f9b38b70a4e97cb47a4252ffd7fccc008c","kind":"tag","published_at":"2021-05-14T01:45:17.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/1.1.4","html_url":"https://github.com/pallets/flask/releases/tag/1.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@1.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.1.4/manifests","release_url":null},{"name":"1.1.3","sha":"c04b0de558fe8e1ccb8edb4525d40e725ae9a24d","kind":"tag","published_at":"2021-05-13T23:25:31.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/1.1.3","html_url":"https://github.com/pallets/flask/releases/tag/1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@1.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.1.3/manifests","release_url":null},{"name":"2.0.0","sha":"2f0c62f5e6e290843f03c1fa70817c7a3c7fd661","kind":"tag","published_at":"2021-05-11T21:44:16.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.0.0","html_url":"https://github.com/pallets/flask/releases/tag/2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.0.0/manifests","release_url":null},{"name":"2.0.0rc2","sha":"d7ac6f5bcf324e7fc588e501b2f18669efd5a12a","kind":"tag","published_at":"2021-05-03T14:14:10.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.0.0rc2","html_url":"https://github.com/pallets/flask/releases/tag/2.0.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.0.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.0.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.0.0rc2/manifests","release_url":null},{"name":"2.0.0rc1","sha":"34eb0dad154177825885d0b9d895538f26a8aee8","kind":"tag","published_at":"2021-04-16T15:54:31.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/2.0.0rc1","html_url":"https://github.com/pallets/flask/releases/tag/2.0.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@2.0.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.0.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/2.0.0rc1/manifests","release_url":null},{"name":"1.1.2","sha":"93dd1709d05a1cf0e886df6223377bdab3b077fb","kind":"commit","published_at":"2020-04-03T17:10:38.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/1.1.2","html_url":"https://github.com/pallets/flask/releases/tag/1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@1.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.1.2/manifests","release_url":null},{"name":"0.12.5","sha":"191710cbda616a53533d5e794a787f24c453ac5a","kind":"commit","published_at":"2020-02-10T19:30:59.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.12.5","html_url":"https://github.com/pallets/flask/releases/tag/0.12.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.12.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.12.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.12.5/manifests","release_url":null},{"name":"1.1.1","sha":"ffc68840f821fb0a4c41a7b2b4eaad6d71f539b7","kind":"commit","published_at":"2019-07-08T17:58:12.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/1.1.1","html_url":"https://github.com/pallets/flask/releases/tag/1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.1.1/manifests","release_url":null},{"name":"1.1.0","sha":"1b4ace9ba5e77679bf9d8e409283654f7589907e","kind":"commit","published_at":"2019-07-04T23:04:42.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/1.1.0","html_url":"https://github.com/pallets/flask/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.1.0/manifests","release_url":null},{"name":"1.0.4","sha":"626b5cc166e6151dfe0e86b514b2d9a1f55752a8","kind":"commit","published_at":"2019-07-04T22:33:46.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/1.0.4","html_url":"https://github.com/pallets/flask/releases/tag/1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@1.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.0.4/manifests","release_url":null},{"name":"1.0.3","sha":"99660cc40984015cbbcd27d1cdc19376b2536443","kind":"commit","published_at":"2019-05-17T17:57:51.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/1.0.3","html_url":"https://github.com/pallets/flask/releases/tag/1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.0.3/manifests","release_url":null},{"name":"1.0.2","sha":"dfd3619d6f8796d48fc4e32f819cec9e8aa59156","kind":"commit","published_at":"2018-05-02T14:16:14.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/1.0.2","html_url":"https://github.com/pallets/flask/releases/tag/1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.0.2/manifests","release_url":null},{"name":"1.0.1","sha":"a15795c99e24c50e2dc85393a8904f3093742646","kind":"commit","published_at":"2018-04-30T02:08:16.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/1.0.1","html_url":"https://github.com/pallets/flask/releases/tag/1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.0.1/manifests","release_url":null},{"name":"0.12.4","sha":"5beb3be536cc743962de6cd2bd95a6e036d11f52","kind":"commit","published_at":"2018-04-30T01:23:30.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.12.4","html_url":"https://github.com/pallets/flask/releases/tag/0.12.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.12.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.12.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.12.4/manifests","release_url":null},{"name":"1.0","sha":"291f3c338c4d302dbde01ab9153a7817e5a780f5","kind":"commit","published_at":"2018-04-26T19:25:54.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/1.0","html_url":"https://github.com/pallets/flask/releases/tag/1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/1.0/manifests","release_url":null},{"name":"0.12.3","sha":"1a9e58e8c97c47c969736d46410f724f4e834f54","kind":"commit","published_at":"2018-04-26T19:12:11.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.12.3","html_url":"https://github.com/pallets/flask/releases/tag/0.12.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.12.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.12.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.12.3/manifests","release_url":null},{"name":"0.12.2","sha":"571334df8e26333f34873a3dcb84441946e6c64c","kind":"commit","published_at":"2017-05-16T06:39:30.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.12.2","html_url":"https://github.com/pallets/flask/releases/tag/0.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.12.2/manifests","release_url":null},{"name":"0.12.1","sha":"a34d0e6878c8c8a5fab05a69785c443f3c17075d","kind":"commit","published_at":"2017-03-31T16:43:36.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.12.1","html_url":"https://github.com/pallets/flask/releases/tag/0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.12.1/manifests","release_url":null},{"name":"0.12","sha":"1042d9d23f3c61f4474aea568a359337cf450fab","kind":"commit","published_at":"2016-12-21T20:22:08.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.12","html_url":"https://github.com/pallets/flask/releases/tag/0.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.12/manifests","release_url":null},{"name":"0.11.1","sha":"d1d82ca8ce7262ad9d27245ce44f86571287810e","kind":"commit","published_at":"2016-06-07T16:22:43.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.11.1","html_url":"https://github.com/pallets/flask/releases/tag/0.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.11.1/manifests","release_url":null},{"name":"0.11","sha":"13e6a01ac86f9b8c0cad692d5e5e8d600674fb6d","kind":"commit","published_at":"2016-05-29T09:02:23.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.11","html_url":"https://github.com/pallets/flask/releases/tag/0.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.11/manifests","release_url":null},{"name":"0.10.1","sha":"298334fffc8288b5a9a45ef4150e3c4292e45318","kind":"commit","published_at":"2013-06-14T08:54:07.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.10.1","html_url":"https://github.com/pallets/flask/releases/tag/0.10.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.10.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.10.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.10.1/manifests","release_url":null},{"name":"0.10","sha":"3b9574fec988fca790ffe78b64ef30b22dd3386a","kind":"commit","published_at":"2013-06-13T08:35:35.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.10","html_url":"https://github.com/pallets/flask/releases/tag/0.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.10/manifests","release_url":null},{"name":"0.9","sha":"ee3e251f9eb557721517faa6d06a6addd48ebc24","kind":"commit","published_at":"2012-07-01T11:12:36.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.9","html_url":"https://github.com/pallets/flask/releases/tag/0.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.9/manifests","release_url":null},{"name":"0.8.1","sha":"19def9606ac50bd308ea283e283cbcf62498d6c7","kind":"commit","published_at":"2012-07-01T11:08:38.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.8.1","html_url":"https://github.com/pallets/flask/releases/tag/0.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.8.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.8.1/manifests","release_url":null},{"name":"0.8","sha":"d5e10e4685f54dde5ffc27c4f55a19fb23f7a536","kind":"commit","published_at":"2011-09-29T21:34:02.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.8","html_url":"https://github.com/pallets/flask/releases/tag/0.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.8/manifests","release_url":null},{"name":"0.7.2","sha":"3f5db33ece48bd22b77fcc62553998ea9a6cfdfc","kind":"commit","published_at":"2011-07-06T08:19:27.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.7.2","html_url":"https://github.com/pallets/flask/releases/tag/0.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.7.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.7.2/manifests","release_url":null},{"name":"0.7.1","sha":"9682d6b371d8c1ce1fd0e58424e836d27d2317b3","kind":"commit","published_at":"2011-06-29T16:37:22.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.7.1","html_url":"https://github.com/pallets/flask/releases/tag/0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.7.1/manifests","release_url":null},{"name":"0.7","sha":"fb1482d3bb1b95803d25247479eb8ca8317a3219","kind":"commit","published_at":"2011-06-28T12:36:52.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.7","html_url":"https://github.com/pallets/flask/releases/tag/0.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.7/manifests","release_url":null},{"name":"0.6.1","sha":"774b7f768214f5b0c125a1b80daa97247a0ac1a6","kind":"commit","published_at":"2010-12-31T14:21:46.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.6.1","html_url":"https://github.com/pallets/flask/releases/tag/0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.6.1/manifests","release_url":null},{"name":"0.6","sha":"5cadd9d34da46b909f91a5379d41b90f258d5998","kind":"commit","published_at":"2010-07-27T12:38:59.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.6","html_url":"https://github.com/pallets/flask/releases/tag/0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.6/manifests","release_url":null},{"name":"0.5","sha":"4c937be2524de0fddc2d2f7f39b09677497260aa","kind":"commit","published_at":"2010-07-06T14:25:44.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.5","html_url":"https://github.com/pallets/flask/releases/tag/0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.5/manifests","release_url":null},{"name":"0.4","sha":"1592c53a664c82d9badac81fa0104af226cce5a7","kind":"commit","published_at":"2010-06-18T15:13:32.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.4","html_url":"https://github.com/pallets/flask/releases/tag/0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.4/manifests","release_url":null},{"name":"0.3.1","sha":"6b3e616cf905fd19c37fca93d1198cad1490567b","kind":"commit","published_at":"2010-05-28T19:21:28.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.3.1","html_url":"https://github.com/pallets/flask/releases/tag/0.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.3.1/manifests","release_url":null},{"name":"0.3","sha":"ce6e4cbd73d57cb8c1bba85c46490f71061f865f","kind":"commit","published_at":"2010-05-27T23:18:29.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.3","html_url":"https://github.com/pallets/flask/releases/tag/0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.3/manifests","release_url":null},{"name":"0.2","sha":"e0fa5aec3a13d9c3e8e27b53526fcee56ac0298d","kind":"commit","published_at":"2010-05-11T23:30:10.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.2","html_url":"https://github.com/pallets/flask/releases/tag/0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.2/manifests","release_url":null},{"name":"0.1","sha":"8605cc310d260c3b08160881b09da26c2cc95f8d","kind":"commit","published_at":"2010-04-16T12:25:24.000Z","download_url":"https://codeload.github.com/pallets/flask/tar.gz/0.1","html_url":"https://github.com/pallets/flask/releases/tag/0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/pallets/flask@0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/tags/0.1/manifests","release_url":null}]},"repo_metadata_updated_at":"2026-11-11T14:12:32.189Z","dependent_packages_count":2451,"downloads":136480505,"downloads_period":"last-month","dependent_repos_count":119058,"rankings":{"downloads":0.010638161285530084,"dependent_repos_count":0.008803995546645587,"dependent_packages_count":0.011004994433306981,"stargazers_count":0.03081398441325955,"forks_count":0.03558281533435924,"docker_downloads_count":0.2775092762932244,"average":0.06239220455105431},"purl":"pkg:pypi/flask","advisories":[{"uuid":"GSA_kwCzR0hTQS02OHJwLXdwOHItNDcyNs4ABSmw","url":"https://github.com/advisories/GHSA-68rp-wp8r-4726","title":"Flask session does not add `Vary: Cookie` header when accessed in some ways","description":"When the `session` object is accessed, Flask should set the `Vary: Cookie` header. This instructs caches not to cache the response, as it may contain information specific to a logged in user. This is handled in most cases, but some forms of access such as the Python `in` operator were overlooked.\n\nThe severity depends on the application's use of the session, and the cache's behavior regarding cookies. The risk depends on all these conditions being met.\n\n1. The application must be hosted behind a caching proxy that does not ignore responses with cookies.\n2. The application does not set a `Cache-Control` header to indicate that a page is private or should not be cached.\n3. The application accesses the session in a way that does not access the values, only the keys, and does not mutate the session.","origin":"UNSPECIFIED","severity":"LOW","published_at":"2026-02-19T20:45:41.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":2.3,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","references":["https://github.com/pallets/flask/security/advisories/GHSA-68rp-wp8r-4726","https://github.com/pallets/flask/commit/089cb86dd22bff589a4eafb7ab8e42dc357623b4","https://github.com/pallets/flask/releases/tag/3.1.3","https://nvd.nist.gov/vuln/detail/CVE-2026-27205","https://github.com/advisories/GHSA-68rp-wp8r-4726"],"source_kind":"github","identifiers":["GHSA-68rp-wp8r-4726","CVE-2026-27205"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-02-19T21:00:08.821Z","updated_at":"2026-11-11T06:07:39.227Z","epss_percentage":0.004,"epss_percentile":0.34536,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02OHJwLXdwOHItNDcyNs4ABSmw","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS02OHJwLXdwOHItNDcyNs4ABSmw","packages":[{"ecosystem":"pypi","package_name":"flask","versions":[{"first_patched_version":"3.1.3","vulnerable_version_range":"\u003c 3.1.3"}],"purl":"pkg:pypi/flask"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02OHJwLXdwOHItNDcyNs4ABSmw/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00Z3JnLXc2djgtYzI4Z84ABHzW","url":"https://github.com/advisories/GHSA-4grg-w6v8-c28g","title":"Flask uses fallback key instead of current signing key","description":"In Flask 3.1.0, the way fallback key configuration was handled resulted in the last fallback key being used for signing, rather than the current signing key.\n\nSigning is provided by the `itsdangerous` library. A list of keys can be passed, and it expects the last (top) key in the list to be the most recent key, and uses that for signing. Flask was incorrectly constructing that list in reverse, passing the signing key first.\n\nSites that have opted-in to use key rotation by setting `SECRET_KEY_FALLBACKS` are likely to unexpectedly be signing their sessions with stale keys, and their transition to fresher keys will be impeded. Sessions are still signed, so this would not cause any sort of data integrity loss.","origin":"UNSPECIFIED","severity":"LOW","published_at":"2025-05-13T20:25:26.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":1.8,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":["https://github.com/pallets/flask/security/advisories/GHSA-4grg-w6v8-c28g","https://nvd.nist.gov/vuln/detail/CVE-2025-47278","https://github.com/pallets/flask/commit/73d6504063bfa00666a92b07a28aaf906c532f09","https://github.com/pallets/flask/releases/tag/3.1.1","https://github.com/advisories/GHSA-4grg-w6v8-c28g"],"source_kind":"github","identifiers":["GHSA-4grg-w6v8-c28g","CVE-2025-47278"],"repository_url":"https://github.com/pallets/flask","blast_radius":9.136365448978589,"created_at":"2025-05-13T21:08:32.435Z","updated_at":"2026-11-05T13:08:01.775Z","epss_percentage":0.00192,"epss_percentile":0.0889,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00Z3JnLXc2djgtYzI4Z84ABHzW","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS00Z3JnLXc2djgtYzI4Z84ABHzW","packages":[{"ecosystem":"pypi","package_name":"flask","versions":[{"first_patched_version":"3.1.1","vulnerable_version_range":"= 3.1.0"}],"purl":"pkg:pypi/flask"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00Z3JnLXc2djgtYzI4Z84ABHzW/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tMnFmLWh4anYtNWdwcc4AAzC9","url":"https://github.com/advisories/GHSA-m2qf-hxjv-5gpq","title":"Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header","description":"When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by a proxy to other clients. If the proxy also caches `Set-Cookie` headers, it may send one client's `session` cookie to other clients. The severity depends on the application's use of the session, and the proxy's behavior regarding cookies. The risk depends on _all_ these conditions being met.\n\n1. The application must be hosted behind a caching proxy that does not strip cookies or ignore responses with cookies.\n2. The application sets [`session.permanent = True`](https://flask.palletsprojects.com/en/2.3.x/api/#flask.session.permanent).\n2. The application does not access or modify the session at any point during a request.\n4. [`SESSION_REFRESH_EACH_REQUEST`](https://flask.palletsprojects.com/en/2.3.x/config/#SESSION_REFRESH_EACH_REQUEST) is enabled (the default).\n5. The application does not set a `Cache-Control` header to indicate that a page is private or should not be cached.\n\nThis happens because vulnerable versions of Flask only set the `Vary: Cookie` header when the session is accessed or modified, not when it is refreshed (re-sent to update the expiration) without being accessed or modified.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-05-01T19:22:20.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.7,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","references":["https://github.com/pallets/flask/security/advisories/GHSA-m2qf-hxjv-5gpq","https://github.com/pallets/flask/commit/70f906c51ce49c485f1d355703e9cc3386b1cc2b","https://github.com/pallets/flask/releases/tag/2.3.2","https://github.com/pallets/flask/commit/afd63b16170b7c047f5758eb910c416511e9c965","https://nvd.nist.gov/vuln/detail/CVE-2023-30861","https://github.com/pallets/flask/releases/tag/2.2.5","https://github.com/pypa/advisory-database/tree/main/vulns/flask/PYSEC-2023-62.yaml","https://www.debian.org/security/2023/dsa-5442","https://lists.debian.org/debian-lts-announce/2023/08/msg00024.html","https://security.netapp.com/advisory/ntap-20230818-0006","https://github.com/advisories/GHSA-m2qf-hxjv-5gpq"],"source_kind":"github","identifiers":["GHSA-m2qf-hxjv-5gpq","CVE-2023-30861"],"repository_url":"https://github.com/pallets/flask","blast_radius":44.15909967006318,"created_at":"2023-05-01T20:03:18.993Z","updated_at":"2026-11-12T10:14:03.997Z","epss_percentage":0.0125,"epss_percentile":0.69523,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tMnFmLWh4anYtNWdwcc4AAzC9","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1tMnFmLWh4anYtNWdwcc4AAzC9","packages":[{"ecosystem":"pypi","package_name":"flask","versions":[{"first_patched_version":"2.3.2","vulnerable_version_range":"\u003e= 2.3.0, \u003c 2.3.2"},{"first_patched_version":"2.2.5","vulnerable_version_range":"\u003c 2.2.5"}],"purl":"pkg:pypi/flask","statistics":{"dependent_packages_count":2451,"dependent_repos_count":119058,"downloads":136480505,"downloads_period":"last-month"},"affected_versions":["0.3.1","0.5.1","0.5.2","0.6.1","0.7.1","0.7.2","0.8.1","0.10.1","0.11.1","0.12.1","0.12.2","0.12.3","0.12.4","0.12.5","1.0.1","1.0.2","1.0.3","1.0.4","1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","2.0.0","2.0.0rc1","2.0.0rc2","2.0.1","2.0.2","2.0.3","2.1.0","2.1.1","2.1.2","2.1.3","2.2.0","2.2.1","2.2.2","2.2.3","2.2.4","2.3.0","2.3.1"],"unaffected_versions":["2.2.5","2.3.2","2.3.3","3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.2","3.1.3"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tMnFmLWh4anYtNWdwcc4AAzC9/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV3djUtNHZwZi1wajZt","url":"https://github.com/advisories/GHSA-5wv5-4vpf-pj6m","title":"Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage","description":"The Pallets Project Flask before 1.0 is affected by unexpected memory usage. The impact is denial of service. The attack vector is crafted encoded JSON data. The fixed version is 1. NOTE this may overlap CVE-2018-1000656.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2019-07-19T16:12:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.7,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2019-1010083","https://github.com/advisories/GHSA-5wv5-4vpf-pj6m","https://github.com/pypa/advisory-database/tree/main/vulns/flask/PYSEC-2019-179.yaml","https://www.palletsprojects.com/blog/flask-1-0-released"],"source_kind":"github","identifiers":["GHSA-5wv5-4vpf-pj6m","CVE-2019-1010083"],"repository_url":null,"blast_radius":44.15909967006318,"created_at":"2022-12-21T16:13:28.800Z","updated_at":"2026-10-18T11:27:15.075Z","epss_percentage":0.01832,"epss_percentile":0.78505,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV3djUtNHZwZi1wajZt","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV3djUtNHZwZi1wajZt","packages":[{"ecosystem":"pypi","package_name":"flask","versions":[{"first_patched_version":"1.0","vulnerable_version_range":"\u003c 1.0"}],"purl":"pkg:pypi/flask"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV3djUtNHZwZi1wajZt/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU2MmMtNXI5NC14aDk3","url":"https://github.com/advisories/GHSA-562c-5r94-xh97","title":"Flask is vulnerable to Denial of Service via incorrect encoding of JSON data","description":"The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2018-08-23T19:10:40.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.7,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2018-1000656","https://github.com/pallets/flask/pull/2691","https://github.com/advisories/GHSA-562c-5r94-xh97","https://github.com/pallets/flask/releases/tag/0.12.3","https://lists.debian.org/debian-lts-announce/2019/08/msg00025.html","https://github.com/pallets/flask/commit/b178e89e4456e777b1a7ac6d7199052d0dfdbbbe","https://github.com/pypa/advisory-database/tree/main/vulns/flask/PYSEC-2018-66.yaml","https://security.netapp.com/advisory/ntap-20190221-0001","https://usn.ubuntu.com/4378-1"],"source_kind":"github","identifiers":["GHSA-562c-5r94-xh97","CVE-2018-1000656"],"repository_url":"https://github.com/pallets/flask","blast_radius":44.15909967006318,"created_at":"2022-12-21T16:13:36.498Z","updated_at":"2026-10-12T12:13:01.659Z","epss_percentage":0.03855,"epss_percentile":0.89697,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU2MmMtNXI5NC14aDk3","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU2MmMtNXI5NC14aDk3","packages":[{"ecosystem":"pypi","package_name":"flask","versions":[{"first_patched_version":"0.12.3","vulnerable_version_range":"\u003c 0.12.3"}],"purl":"pkg:pypi/flask"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU2MmMtNXI5NC14aDk3/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/flask","docker_dependents_count":4717,"docker_downloads_count":1615993923,"usage_url":"https://repos.ecosyste.ms/usage/pypi/flask","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/flask/dependencies","status":null,"funding_links":["https://palletsprojects.com/donate","https://github.com/sponsors/pallets","https://tidelift.com/funding/github/pypi/Flask","https://thanks.dev/u/gh/pallets"],"critical":true,"issue_metadata":{"last_synced_at":"2026-11-11T01:22:13.821Z","issues_count":2786,"pull_requests_count":3048,"avg_time_to_close_issue":9225771.560043275,"avg_time_to_close_pull_request":1986480.3594164457,"issues_closed_count":2773,"pull_requests_closed_count":3016,"pull_request_authors_count":1583,"issue_authors_count":2134,"avg_comments_per_issue":3.4709260588657576,"avg_comments_per_pull_request":1.67749343832021,"merged_pull_requests_count":1685,"bot_issues_count":4,"bot_pull_requests_count":224,"past_year_issues_count":86,"past_year_pull_requests_count":197,"past_year_avg_time_to_close_issue":145661.2705882353,"past_year_avg_time_to_close_pull_request":87586.28571428571,"past_year_issues_closed_count":85,"past_year_pull_requests_closed_count":196,"past_year_pull_request_authors_count":161,"past_year_issue_authors_count":72,"past_year_avg_comments_per_issue":1.6976744186046513,"past_year_avg_comments_per_pull_request":0.7055837563451777,"past_year_bot_issues_count":4,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":16,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/pallets%2Fflask/issues","maintainers":[{"login":"davidism","count":420,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/davidism"},{"login":"pgjones","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgjones"},{"login":"ThiefMaster","count":33,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ThiefMaster"},{"login":"leandrohstein","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"CheeseCake87","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/CheeseCake87"},{"login":"greyli","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/greyli"}],"active_maintainers":[{"login":"davidism","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/davidism"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/flask/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/flask/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/flask/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/flask/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/flask/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/flask/codemeta","maintainers":[{"uuid":"Pallets Projects","login":"Pallets Projects","name":null,"email":null,"url":null,"packages_count":10,"html_url":"https://pypi.org/user/Pallets Projects/","role":null,"created_at":"2023-04-13T22:15:32.412Z","updated_at":"2023-04-13T22:15:32.412Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/Pallets%20Projects/packages"}]}