PyPI/flask-appbuilder CVE-2024-25128: critical 9.1, EPSS 0.86%
Flask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID
Action: Upgrade flask-appbuilder to 4.3.11 or later.
pip install flask-appbuilder==4.3.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.11 | - |
Fixed versions
| 4.3.11 |
Sources
- osv: PYSEC-2026-340
- https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-j2pw-vp55-fqqj
- https://nvd.nist.gov/vuln/detail/CVE-2024-25128
- https://github.com/dpgaspar/Flask-AppBuilder/commit/6336456d83f8f111c842b2b53d1e89627f2502c8
- https://github.com/dpgaspar/Flask-AppBuilder
- https://pypi.org/project/flask-appbuilder
- https://github.com/advisories/GHSA-j2pw-vp55-fqqj
CVE-2024-25128 · published · modified · JSON