Dependency scanning
Check whether flask-appbuilder is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
CVE-2025-32962
Flask-AppBuilder open redirect vulnerability using HTTP host injection
CVE-2025-58065
Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods
CVE-2024-45314
Flask-AppBuilder's login form allows browser to cache sensitive fields
CVE-2024-25128
Flask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID
CVE-2024-27083
Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS)
CVE-2025-24023
Flask-AppBuilder Observable Response Discrepancy
CVE-2022-21659
Observable Response Discrepancy in Flask-AppBuilder
CVE-2021-41265
Improper Authentication in Flask-AppBuilder
CVE-2021-32805
Flask-AppBuilder Open Redirect vulnerability
CVE-2021-29621
Observable Response Discrepancy in Flask-AppBuilder
CVE-2023-29005
Flask-AppBuilder Has No Rate Limiting on Login AUTH DB
CVE-2024-45314
Flask-AppBuilder's login form allows browser to cache sensitive fields
CVE-2024-27083
Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS)
CVE-2025-32962
Flask-AppBuilder open redirect vulnerability using HTTP host injection
CVE-2023-29005
Flask-AppBuilder Has No Rate Limiting on Login AUTH DB
CVE-2025-58065
Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods
CVE-2022-24776
Open Redirect in Flask-AppBuilder
CVE-2022-24776
Open Redirect in Flask-AppBuilder
CVE-2024-25128
Flask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID
CVE-2025-24023
CVE-2025-24023
CVE-2022-31177
Flask-AppBuilder before v4.1.3 allows inference of sensitive information through query strings
CVE-2023-34110
Flask-AppBuilder vulnerable to possible disclosure of sensitive information on user error
CVE-2021-29621
CVE-2021-29621
CVE-2023-34110
CVE-2023-34110
CVE-2022-31177
CVE-2022-31177
CVE-2022-21659
CVE-2022-21659
CVE-2021-41265
CVE-2021-41265
CVE-2021-32805
CVE-2021-32805
Browse more PyPI advisories
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes