{"action":"Upgrade flask to 2.2.2-3 or later.","affected":[{"fixed":"2.2.2-3","introduced":"0"}],"component":"flask","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["2.2.2-3"],"id":"tcs_01M5NJ1J2JJAJ8FE4YEEM0WN26","modified_at":"2026-10-26T18:01:04.166483729Z","published_at":"2023-05-02T18:15:52.373Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2023-30861","https://security-tracker.debian.org/tracker/CVE-2023-30861"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2023-30861#Debian:13/flask","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2023-30861"}],"summary":"Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy"}