Vulnerable-Flask-App icon indicating copy to clipboard operation
Vulnerable-Flask-App copied to clipboard

Intentionally Vulnerable Flask app for use in Demos

Results 52 Vulnerable-Flask-App issues
Sort by recently updated
recently updated
newest added

Bumps [requests](https://github.com/psf/requests) from 2.18.1 to 2.20.0. Changelog Sourced from requests's changelog. 2.20.0 (2018-10-18) Bugfixes Content-Type header parsing is now case-insensitive (e.g. charset=utf8 v Charset=utf8). Fixed exception leak where certain redirect...

dependencies

Bumps [flask](https://github.com/pallets/flask) from 0.12.2 to 1.0. Release notes Sourced from flask's releases. 1.0 The Pallets team is pleased to release Flask 1.0. [Read the announcement on our blog.](https://www.palletsprojects.com/blog/flask-1-0-released/ There are...

dependencies

Bumps [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) from 1.1.11 to 1.3.0. Commits See full diff in compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sqlalchemy&package-manager=pip&previous-version=1.1.11&new-version=1.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/configuring-github-dependabot-security-updates) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependencies

Bumps [jinja2](https://github.com/pallets/jinja) from 2.9.6 to 2.11.3. Release notes Sourced from jinja2's releases. 2.11.3 This contains a fix for a speed issue with the urlize filter. urlize is likely to be...

dependencies

Bumps [pyyaml](https://github.com/yaml/pyyaml) from 3.12 to 5.4. Changelog Sourced from pyyaml's changelog. 5.4 (2021-01-19) yaml/pyyaml#407 -- Build modernization, remove distutils, fix metadata, build wheels, CI to GHA yaml/pyyaml#472 -- Fix for...

dependencies

Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.21.1 to 1.26.5. Release notes Sourced from urllib3's releases. 1.26.5 :warning: IMPORTANT: urllib3 v2.0 will drop support for Python 2: Read more in the v2.0 Roadmap Fixed...

dependencies

Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 1.5.2 to 2.4.0. Release notes Sourced from pyjwt's releases. 2.4.0 Security [CVE-2022-29217] Prevent key confusion through non-blocklisted public key formats. https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffqj-6fqr-9h24 What's Changed Add support for Python...

dependencies

Bumps [lxml](https://github.com/lxml/lxml) from 4.2.1 to 4.9.1. Changelog Sourced from lxml's changelog. 4.9.1 (2022-07-01) Bugs fixed A crash was resolved when using iterwalk() (or canonicalize()) after parsing certain incorrect input. Note...

dependencies

Bumps [python-docx](https://github.com/python-openxml/python-docx) from 0.8.5 to 0.8.6. Changelog Sourced from python-docx's changelog. 0.8.6 (2016-06-22) ++++++++++++++++++ Add #257: add Font.highlight_color Add #261: add ParagraphFormat.tab_stops Add #303: disallow XML entity expansion Commits e784a73...

dependencies

Bumps [certifi](https://github.com/certifi/python-certifi) from 2017.4.17 to 2022.12.7. Commits 9e9e840 2022.12.07 b81bdb2 2022.09.24 939a28f 2022.09.14 aca828a 2022.06.15.2 de0eae1 Only use importlib.resources's new files() / Traversable API on Python ≥3.11 ... b8eb5e9 2022.06.15.1...

dependencies