{"action":"Upgrade flask-security to 5.8.1 or later.","affected":[{"fixed":"5.8.1","introduced":"0"}],"component":"flask-security","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["5.8.1"],"ghsa_id":"GHSA-w2j7-f3c6-g8cw","id":"tcs_01M5KG174T8YGPVG8ST76SNCQ0","modified_at":"2026-06-23T23:00:14.667248519Z","published_at":"2026-06-23T22:46:31Z","references":["https://osv.dev/vulnerability/GHSA-w2j7-f3c6-g8cw","https://github.com/pallets-eco/flask-security/security/advisories/GHSA-w2j7-f3c6-g8cw","https://nvd.nist.gov/vuln/detail/CVE-2023-49438","https://advisories.gitlab.com/pypi/flask-security-too/CVE-2023-49438","https://github.com/pallets-eco/flask-security","https://osv.dev/vulnerability/CVE-2023-49438"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"GHSA-w2j7-f3c6-g8cw","url":"https://osv.dev/vulnerability/GHSA-w2j7-f3c6-g8cw"}],"summary":"Flask-Security has an Open Redirect issue"}